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Abstract: 


This  is  a report  on  some  of  tlic  first  experiments  of  any  size  carried  nut  usine  the 
new  f.rst  order  proof  checker  FOI  We  present  two  different  first  order 
<iMoni  at  i/a  turns  of  the  nietamatheinatics  of  the  logic  which  FOL  itself  checks  and 
show  seven!  pr  mfs  using  each  one.  The  difference  between  the  axion.atizations  is 
that  one  defines  the  luetainatheiuatics  in  a many  sorted  logic,  the  other  does  not. 
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SECTION  I INTRODUCTION 

This  paper  rrpiesems  a fust  attempt  at  the  axiomanzation  of  the  metamathematics  of  •>,  first  order 
theory  and  at  using  the  new  pioof  checker  FOL  (Fust  Older  Logic)  The  logic  which  FOL  checks 
Is  described  in  detail  in  the  user  manual  for  this  program,  Weyhrauch  and  Thomas  1374  It  is  based 
on  a system  of  natuial  deduction  ciesriibed  tu  Prawitz  1965,  1970, 

Our  motivation  In  axiomatmng  the  metamathematics  of  FOL  was  the  desne  to  work  on  an 
example  which  could  be  used  as  a case  study  for  projected  features  of  FOL  and,  at  the  same  rime, 
had  independent  inieirst  with  inspect  to  teptesentmg  the  proofs  of  significant  maihematical  results 
to  a computer. 

The  eventual  ability  to  clearly  expiess  the  theorems  of  mathematics  to  a computer  will  require  the 
facility  to  state  and  prove  theorems  of  metamathematics.  There  are  several  clear  examples. 

a.  Axiom  schemas  How  exactly  do  we  express  that 

P(0)  a Vn (P(n)  = P(n*l ))  = Vn.P(n) 

Is  an  axiom  schema?  We  need  to  say:  "If  for  any  first  order  sentence  P with  one  free  variable  y we 
denote  by  P(n)  the  fotniula  obtained  from  P by  substituting  n for  y assuming  n Is  free  for  y in  P, 
then  the  sentence 

P(0)  a Vn.(P(n)  =>  P(n»l ))  = Vn  P{n) 

is  an  axiom  of  arithmetic'. 

b Theorem  schemas  The  following  kind  of  "(heoiem*  is  sometimes  seen  in  set  theory  books 
Vxl  xn  S.  3T.  Vu  «xl,...,xn>(T  « Gy  (<xl,...,xn,y><$)). 

It  asserts  the  existence  of  some  particular  projection  of  n* I -tuples.  In  its  usfal  formulation  this  is 
not  a theoiem  of  set  theory  at  all,  but  a metatheorem  which  states  that,  for  each  n,  the  above 
sentence  is  a theoiem  We  do  not  know  of  any  implementation  of  first  order  logic  capable  of 
expressing  the  above  notion  in  a straightforward  way. 

c Subsidiary  deduction  rules  Below  we  show  how  to  prove  that  if  there  Is  a proof  of  Vx  y.WFF  then 
theie  is  also  a pioof  of  Vy  x.WFF,  where  WFF  is  any  well  formed  formula  We  chose  this  task  because 
It  seemed  simple  enough  to  do,  and  is  a theoiem  which  may  actually  be  used  The  use  of 
metatheoiems  as  rules  of  mfnrnce  by  means  nf  a reflection  principle  will  be  discussed  In  a future 
memo  by  Richaid  Weyhrauch  Eventually  we  hope  to  check  some  more  substantial 
metamar!, rm, meal  thecn ems 

d Interesting  mathemati,  <tl  theorems.  We  presen  'wo  examples.  The  fiist  is  any  theorem  about  finite 
groups.  The  notion  of  finite  gioup  cannot  be  .mined  in  the  usual  first  order  language  of  group 
theory  Thus  many  "theoimis"  are  actually  metatheorcms,  unless  you  axiomatize  groups  in  .it 
theory  The  second  theorem  is  the  "duality  principle*  in  projective  geometry. 
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SECTION  2 THE  AXIOM  SVSTEM 

In  this  section  we  present  two  axiomatizatlons  of  the  metamathematics  of  first  order  logic  The  main 
difference  between  them  is  that  one  Is  done  in  a many  sorted  first  order  logic  and  the  other  not 
1 hese  axlonntlzatioiis  represent  an  attempt  at  experimenting  with  proofs  about  properties  of 
formulas  and  deductions.  No  effort  has  been  spent  on  guaranteeing  that  the  axioms  a-e 
independent  It  would  not  only  have  been  uninteresting  but  also  contrary  to  our  basic  philosophy 
We  wish  to  find  axioms  which  naturally  reflect  the  relevant  notions  At  the  moment  this 
axlomatizatton  Is  far  from  being  In  Its  final  form.  Neither  the  extent  of  the  notions  Involved  nor  the 
best  w,»y  cl  expressing  them  is  considered  settled. 


Section  2.1  The  sorts 

The  sorts  we  have  defined  correspond  to  the  basic  notions  of  the  metamathematics  ie  terms 
formulas.  Individual  variables,  logical  symbols,  function  symbols  etc.  and  to  the  notions  of  the 
domains  (strings  and  sequences  of  strings)  in  which  the  axiomatization  has  been  defined  FOL  (see 
Weyhrauch  and  Thomas  I97d)  allows  the  declaration  of  variables  to  be  of  a certain  sort  In  the 

formulas  appearing  in  this  paper  the  following  declarations  are  assumed: 


C e*  g3  r4  g5  g6 

«q  sql  sq2  sq3  sq4  sq5  sqb  < SEQ 

pf  pfl  p<2  r<3  pf 4 pf5  pt6  < PROOFTREE 

• *1  s2  s3  *4  s5  s6  < STRING 
I I!  12  13  14  15  16  < TERM 
x xl  x2  x3  x4  x5  x6  < INDVAR 

•I  all  *12  «I3  ©14  al5  el6  ( ELF 

Ml  <2  f3  <4  15  16  < FORM 
th  thl  th2  Ih3  th4  th5  th6  < BEW 
A AI  A2  A3  A4  A5  A6  < AXIOM 
cO  cl  c2  c3  c4  c5  c6  < INDCONST 

a al  a2  *3  a4  a5  a6  ( ATOM 

n nl  n2  n3  n4  n5  K < INTEGER 

nc  nel  nc2  nc3  nc4  nc5  nc6  < NUMERAL 


range  over  the  most  general  sort 

(SEQs  are  sequences  of  strings) 

(PROOFTRtts  are  sequences  representing 
derivations  in  FOL) 

(STRINGS  are  strings) 

(TERMs  are  strings  representing  terms) 

(INDVARs  are  strings  ^presenting  individual 
variables) 

(ELFs  are  strings  representing  elementary 
formulas) 

(FORMs  are  well  formed  formulas) 

(BEWs  are  theorems  of  a first  order  theory) 

(AXIOMS  are  axioms  of  a particular  theory) 
(INDCONSTs  are  mdi vjdL.al  constants) 

(ATOMs  are  the  individual  constituents  of  a string) 
(INTEGERS  are  integers) 

(NUMERALS  are  numerals) 
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sy  syl  sy2  sy3  sy4  sy5  sy6  < SYM 
np  np  I np2  np3  np4  r»p5  npG  < N.PLCSYM 
fn  fnl  fn2  f r»3  fn 4 fn5  fn6  < OPCONST, 

P PI  P2  P3  PI  P5  P6  < PREDCONST; 


(SYMs  are  logical  symbols) 

(N.PLCSYMs  are  symbols  winch  have  an  nrity) 
(OPCONSTs  are  function  symbols) 

PREDCONSTs  are  predicate  symbols) 


the  partial  older  between  these  suits  is  defined  by  the  following  FOL  declarations. 


MG  SEQ 
MG  PROOFTREE 
MG  STRING 
MG  TERM 
MG  FORM 
MG  BEW 
MG  ATOM 


MG  'NDCONST 
MG  SYM 
MG  N.PlCSYM 


> | STRING  , PROOFTREE  | ; 

> | FORM  }; 

> | TERM  , FORM  , ATOM  , VARSTRING  | ; 

> { INlWAR  | : 

> { ELT  SENTCONST  , PREDPARfl  , AXIOM  , BEW  } ; 

> | AXIOM  | ; 

> INOCONST  , SENTCONST  , SYM  , INTEGER  , N.PLCSYM  , 

INOPAR  , INDVAR  , AUXSIGN  , PREOCONSTO  , PREDPAR0  }; 

> I NUMERAL  I ; 

> j QUANT  , SEN  I CONN  | ; 

l | PREDCONST  , OPCONST , PREDPAR } ; 


Scuts  ate  alwiys  piedu.ites  with  one  nguinent 


The  declaration 


MG  SORTI  > | S0RT2  , SORTn  | 


should  be  te.vl  as  SORTI 


ts  i time  geneial  than  S0PT2, ...SORTn  and  corresponds  to  the  implicit  axioms 


Vg  SORTI  (r)3S0RTI(r), 


Vg  30RTn(g)=S0RTI  (r). 

The  fust  deilatatiou.  Im  inst  nice,  says  that  strings  and  derivations  are  particular  sequences  of 
fomutlas  Stiii.)  s aie  m fart  sequences  of  length  I and  derivations  are  those  sequences  satisfying  the 
predicate  PROOFTREE 


Section  2 .’  The  domain  of  lepiesentatinii  of  thr  tnelnmatliemat ies 

The  basic  notions  of  the  on  t .im.it In  m.itics  of  fust  older  logtc  have  been  axiom.ittzed  m terms  ol 
strings  and  spumes  of  mm,  s The  pimntivc  funrtn.ns  on  them  are  concatenation  (c  for  strings,  cc 
for  sequence*)  and  srleums  (car,  edr  lor  Mi  mgs  and  scar,  sedr  for  sequences)  c and  cc  aie  infix 
opei  ators 
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2.2.1  Formulas  and  terms 

Formulas  and  terms  are  represented  by  the  string  of  symbols  appearing  in  them.  Terms  are  defined 
recursively  as  strings  which  either  represent  an  individual  variable  or  can  be  decomposed  into  n*l 
substrings  representing  a function  symbol  of  arity  n,  followed  by  n terms.  The  two  predicates 
defining  terms  are 

TERMSEQ(0,LAMBDA) 

V*.(TERM(s)  ■ INDVAR(s)  v 3n  <n  (fn*car(s)  a n*arity(in)  a 7ERMSEQ(n,cdr(s)))) 

Vn  t.(TERMSEQ(n,s)  • ((car(s)*LPARSYM)  A ((len(s)  gl  «).RPARSYM)  A 

3nl  (TERM(subsiring(s,2,n i ))  a TERMSEQ(n-l  ,subs1rrng(s,n I ♦! ,l«n(s)-l ))))) 

where  the  function  substring^, m,n)  (see  appendix  1.2)  returns  the  substring  of  t starting  from  its  m-th 
element  and  ending  with  the  n th.  len(s)  computes  the  length  of  i and  (n  gl  s)  selects  the  n-th  element 
of  s. 

Well  formed  formulas  (wffs)  are  represented  as  strings  which  either  are  elementary  formulas 
(defined  by  the  predicate  ELF)  or  can  be  partitioned  Into  substrings  for  formulas  and  logical 
connectives.  Formulas  are  defined  by: 

V«.(ELF(s)  ■ (s«FAL$E$YM  v PREDPARO(s)  v 3n  P.(P*car(s)  a n«artly(P)  A TERMSEQ(n,cdr(s))))), 

V«.(FORM(s)  « (ELF(s)  v 3x  f Mx  gen  <)  v s*(x  ex  f))  v 

3fl  I2.(s*(fl  Jis  12)  v s«(M  con  <2)  v s«(H  impl  12))  v 3f.s»neg(f)  ))  ;; 

E*n  is  the  infix  operator  that  maps  its  arguments  x and  f into  the  stimg  (FORALLSYM  e x)  e f 
representing  the  well  formed  formula  Vx.f  The  operator  ex  is  used  for  the  existential  quantifier, 
dis,  con  and  impl  are  the  infix  operators  for  the  disjunction,  con Jt  notion  and  implication  of  two 
formulas  Finally,  nog  is  the  operator  which  maps  a formula  Into  its  negation. 

We  could  possibly  represent  wffs  as  structured  objects  (lists,  trees,  etc.)  which  contain  all  the 
information  about  the  structure  of  the  formula  and  do  not  require  any  parsing  This  approach 
amounts  to  axlomatizing  metamathematics  in  terms  of  the  abstract  syntax  of  first  order  logic,  instead 
of  strings  of  symbols  Both  of  these  possibilities  should  be  explored.  We  have  chosen  the  first 
alternative  because 

1)  It  is  the  most  traditional,  i e.  metamathematics,  as  it  appears  in  logic  books,  is  usually  stated  in 
terms  of  strings. 

2)  Axioms  in  terms  of  abstract  syntax  are  simply  theorems  of  the  theory  expressed  in  terms  of 
strings  Thus  the  two  representations  look  substantially  the  same  with  respect  to  "high  level” 
theorems 

2)  ill-formed  formulas  can  be  mentioned.  This  is  of  course  impossible  in  an  axiomatizatlon  in 
terms  of  the  abstract  syntax. 
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I he  pi opet ties  of  wif s Ii’lrv  till  to  uni  tlnmy  have  limn  defined  by  the  pmdicates  FR,  FRN,  C.EB  and 
SBT.  FR(x,f)  is  tine  iff  ilir  v iinlili*  % lias  at  hast  one  f i eo  occunence  in  the  wff  f,  while  FRN(x,n,f) 
and  GEB(x,n,f)  am  m'p.’f  nv»  ly  tine  when  the  variable  x occurs  free  01  hound  at  the  place  n in  'he 
formula  f Them  pmdn  lies  am  defined  m appendix  16  In  addition,  some  genet  aimed  selector 
functions  are  difmed,  winch  < valium  tin*  fn  st  01  the  k-th  fiec  occurrence  of  a vai  nhle  m a wff,  or 
the  nunihei  of  in  fire  umiiniitrs  | he  pmdicate  SBT  is  then  defined  It  axiomatizes  the  notion  of 
substitution  of  a trim  lot  any  fur  occur i enc r of  a vauable  in  a wff 

Vx  » fl  f2  (SBT (x,t,f 1 ,12)  = 

Vnl  n2  ((n2-(numhhoeocc(i',nl,ll).+(lon(l)-l))tnl)  a 
(HNDVARfnl  rHI ) a (nl  rI  fl  )=(n2  rI  f2))  a 
(INDVAR(n  I &l  f!)  a ((FRN(x,nl  ,< I )=»SU0T(l (f 2,n2 ))  a 

('FRN(x,n|  ,f  I ) a INVART(n)  ,fl  fn2,l2))))  ))) 

V«  f2  n2  (SUBT (I ,f 2 ,n 2 ) * Vx2  k ((k  r)  1)^*2  a FRN(x2,n2-(len(l)-k),f2)))), 

Vn  fl  nl  f2  (INVAR  T (n,f  I ,n  I ,f  2 ) = ((G£B(nl  rI  (2,nl,f2)  * GEB(n  rI  fl,n,fl ))  a 

(FRfffnl  rI  f2,nl,f2)  » FRN(n  Bl  f I ,n,f  1 >)  A (nl  rI  f2 )=(n  glfl))) 

In  the  pmvmiis  I mitioii.  nl  n any  the  string  ,1  and  n2  is  the  cm  responding  position  in 

12  1 he  auvilniy  piedn.ne  SUBT  st  itrs  that  the  vanahles  appearing  in  the  term  ! substituted  for  a 
free  occmmme  nl  the  v.nnhh  x ate  s'lll  fire  INVART  defines  winch  propeities  of  fl  are  still  true 
for  12.  If  the  tr  im  I is  a van  aide,  then  SGT  leduces  to  SBV, 

Vx  I x2  fl  f2  (SBV(x  I , x I , f I , f 2 ) - 

Vn  (HN0VAR(n  r(  fl)  a (n  r(  f|)-(n  r|  f2)  a 

(INDVARfn  rI  fl)  a ((FRN(x  I ,n,l  I ) a FRN(x2,n,f2))  A 
(-FRN(x|  ,n,f  I ) a INVARVtn.fi  ,f2)))))), 

Vn  fl  f2.(INVARV(n,fl.f?)  ((GFB(n  rI  f2,n,{2)  » GEB(n  rI  f 1 ,n,f  1 ))  a 

(FRN(n  rI  (2,n,f2)  ? FKN(n  r.l  fl ,n,f I ))  a (n  rI  f2)=(n  rI  (I ))), 

The  proof  of  the  e>pnva|en> e of  SOI  and  SBV  when  I is  a variable  is  very  simple  It  is  based  on  the 
fact  that  n?  coincides  with  nl  when  the  trim  I has  length  I (see  appendix  4).  The  function  sbt  (sbv) 
evaluates  to  the  string  lepmsmting  the  result  of  substituting  a term  (variable)  for  every  free 
occurrence  of  a vauable  in  a given  wff.  sbt  and  r.bv  are  defined  from  the  predicates  SBT  and  SBV  as 
follows 

Vx  « fl  f2.(SBT(x,t,f I ,f2)  = sbf(x,t,f|  H2) 

Vx  1 x2  fl  <2  (SBV(x!,x2,fllf2)  sbv(x  I ,x2,f  I )-f2) 

1 he  problem  of  f on lm>;  the  ben  w ty  of  funrtions  in  I Ol.  is  ciiicmI  m the  axiom  system 

given  m this  p.apn  a ninfoim  way  has  not  l.ecn  followed  In  defining  the  substitution  we  are 
intemstrd  m propeities  of  the  f mice  if  ms.  sbl  md  r.bv  and  in  drawing  conclusions  fiom  the  fact  that  .a 
substitution  has  been  made  It  is  Unis  useful  to  have  a medicate  which  defines  the  i elation  between 
formulas  brfom  and  »tn  i a substmitmn  mste.i-l  of  infenng  it  Irom  the  definitions  of  the  functions 
(stated  for  example  as  a system  of  eipiatmiis.  as  m Kleenc  1962)  One  of  the  motivations  of  the 
present  expenmeut  was  to  explain*  diflemnt  ways  of  defining  functions.  We  do  not  yet  have  enough 
examples  ol  proofs  to  make  a rliai  itaiemmt  .about  this  matter 
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2.2.2  Rules  of  inference,  deductions  and  the  notion  of  provability 

The  rules  of  inference  are  defined  by  the  predicates  in  appendix  1.7.  The  rules  with  one  premise, 
are  expressed  by  means  o<  a binary  predicate  whose  arguments  are  two  sequences  of  wffs  (sq,  pi) 
which  satisfy  PROOFTREE.  The  predicate  is  true  iff  pi  is  the  scdr  of  uq  and  the  first  element  of  sq  is  a 
wff  obtained  by  applying  that  particular  deduction  rule  to  the  first  wff  of  pf.  The  rules  with  more 
antecedents  are  definrd  In  a similar  way. 

Derivations  are  recursively  defined  as  sequences  of  wffs  which  either  are  a single  wff  or  are 
obtained  from  one  or  more  derivations  by  applying  one  of  the  deduction  rules.  The  recursion  is 
implicitly  stated  by  saying  that  there  exist  objects  of  sort  PROOFTREE  which  satisfy  one  of  the 
predicates  defining  the  rules  of  inference,  These  sequences  represent  the  linearization  of  a deduction- 
tree  and  are  defined  as  follows 

Vsq.(PROOFTREE(sq)  * 

(FORM(sq)  v 

3pf  (ORKsq.pf)  v ANDE(r.q.pl)  v FALSEE(r,q,pf)  v N0TI(sq,pf)  v NOTE(sq.pf)  v IMPLI(sq,pl))  v 

3pf  x I (GENIN.pi.x.t)  v GENE(r,q,pf,x,t)  v EXI(sq,pf,x,t))  v 

3pfl  pf2  (ANDKrq.pf  I ,pf2)  v FALSEI(sq,pfl  ,pf2)  v IMPLE(sq,p<l  ,pf2))  v 

□pf  1 pf 2 xl  x2  EXE(sq,pfl  ,pf 2,x I ,x2)  v 

□pf I pf 2 p»3.0RE(sq,pfl,pf2,pf3)  ))  ;; 

A sequence  of  wffs  is  a proof  tree  if  either  It  consists  of  a single  wff  or  one  of  the  following 
alternatives  holds  there  exists  another  proof tiee  and  a one  premise  deduction  rule  has  been  applied; 
there  exist  two  prooftrees  and  one  of  the  two  premises  rules  has  been  applied;  finally,  there  are  three 
prooftrees  and  the  predicate  defining  the  v-elimination  rule  is  true.  Note  that  the  root  of  a proof'ree 
Is  not  necessarily  a tlieoicm  in  a given  theory.  A predicate  DEPEND  has  been  defined  which  is  true  u 
a given  wff  is  a dependence  for  the  root  o'  a prooftree.  The  axioms  about  DEPEND  allows  to  decide 
all  the  dependencies  of  a prooftiee. 

Since  some  of  the  deduction  rules  (the  implication  introduction,  for  Instance)  eliminate  dependencies, 
not  all  the  leaves  of  a prooftree  pf  are  dependencies  for  a wff  f such  that  f»scar(pf)  The  predicate 
DEPEND  is  true  only  for  those  leaves  of  the  prooftree  which  the  formula  f actually  depends  on.  Its 
definition  is  shown  in  appendix  1.8  The  axioms  DEPEND  state  which  dependencies  do  nor  change  by 
applying  the  deduction  rules  and  are  transferred  from  one  prooftree  to  the  other.  The  axioms 
NDEPND  state  which  rules  discharge  dependencies  in  a given  prooftree. 

Using  this  notion  of  dependence  .the  provability  of  a formula  in  a theory  Is  defined  as  follows- 
Vf.(BEW(f)  «■  3sq  (PROOFTREE(r.q)  a f=scar(sq)  a Vfl  (DEPEND(sq,f  I ) a AXIOM(fl ))));; 

A wff  f is  a theorem  in  a given  theory  if  there  exists  a prooftree  whose  first  element  Is  f and  whose 
only  dependencies  are  axioms  in  that  theory  We  have  limited  our  attention  to  theories  in  which 
axioms  have  no  free  variables  This  property  is  defined  by  the  axiom: 

Vx  f (AXIOM(f)  = -FR(x,f ));; 


Section  2.3  The  main  proof  in  the  many  sorted  logic 
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The  main  theorem  we  have  pinverl  m this  a \ iom.it uat ion  of  ilie  metamathrmatics  states  that  if  Vx 
ywff  is  provable  in  some  theoiy,  then  Vy  x wff  is  also  provable.  We  have  chosen  this  theorem 
because,  even  if  vei  y simple,  it  involves  basic  notions  of  provability,  substitution  and  universal 
quantification  lis  pmnf  is  Innnd  in  appendices  M 2.  The  theorem  depends  on  the  first  three  lines 
of  the  proof  The  fust  step  is  a lemma  stating  that  Vx  wlf sbl (x,x,f )=wlf,  ie  substituting  a variable  x 
for  any  fiee  ucciinciice  of  x in  wff  doesn’t  change  that  wff.  Steps  two  and  three  give  simple  facts 
about  sequences.  The  iheoiem  is  then  pioved  lay  instantiating  two  other  lemmas;  I)  if  Vx  wff  is  a 
theorem,  then  wff  is  a bn  a them  mi.  2)  if  wff  is  provable,  then  x cannot  be  free  In  the  dependencies 
of  the  proof  of  wff  and  so  Vx  wff  is  provable  This  is  of  course  true  only  for  theories  with  no  free 
variables  in  their  axioms 

The  only  propeity  of  ilie  mfeimre  inles  used  in  this  proof  involves  universal  quantification  The 
restriction  on  the  applicability  of  tlm  V-mti o> luction  rule  is  that  the  variable  to  be  universally 
quantified  m a wff  must  not  appear  fmr  m any  uf  its  dependencies.  This  restnctioii  is  reflected  in 
our  a.xiomati/atmn  by  tlm  pirdiratr  APGENI  In  tins  proof  APGENI  is  satisfied  because  if  wff  is 
provable,  its  dependent  n s tie  axioms  with  no  fo  e variables. 

The  following  is  an  infmmal  piool  of  tin'  above  tbeoieim.  If  Vxwff  is  piovable.  then  there  is  a 
prooftiee  pf  whose  in  si  Minit  is  Vxwff.  Ilie  sequence  (Vxwff)  cc  pf  is  still  a ptooftiee  It  is  obtained 
by  aup1vjng  t ho  V elimination  mle  The  application  of  tins  rule  doesn’t  add  any  dependency  to  the 
prooftiee.  As  its  only  dependencies  aie  axioms,  it  follows  from  the  definition  of  BEW  that  wff  is  a 
theorem.  On  the  othei  hand,  if  wff  is  a tle-oiem  their  exists  a prooftiee  pf  whose  first  element  is  wff. 
By  applying  the  V mti  ri<'in  tinn  mle  to  pi  we  obtain  the  proofti  ee  (Vx.wlf)  cc  pf  This  rule  is 
applicable  since  throirms  have  no  fire  vatiahles  in  their  dependencies.  It  follows  that  Vxwff  is  a 
theorem.  If  Vx  y wff  is  piovable  then  Vx  wff  and  wff  are  provable  using  the  first  lemma.  Finally,  we 
can  quant. fy  first  over  x and  then  over  y,  obtaining  Vy  x.wff  as  a theorem. 


Section  2.4  Another  .ixiomati/aticui 

A different  axiomatiratnn  has  been  given  hi  an  earlier  version  of  FOL  where  there  was  no  facility 
for  creating  sorts  We  piesrnt  heir*  as  we  want  to  do  some  compaiisons  between  proofs,  and  discuss 
some  of  the  fealmes  ul  FOL.  Some  diffeieurrs  between  the  two  axtomatuations  are  due  to  the  new 
featnirs  available  in  FOL  They  will  he  discussed  m the  next  section  Here  we  only  discuss  the 
difference  between  the  definition  of  formulas  and  terms.  The  list  of  all  the  axioms  can  be  found  in 
appendices  2 I K 

In  this  axiomilw  moll,  Immiilis  uid  trims  air  still  lepiesentrd  as  the  siring  ol  the  symbols 
appearing  in  them  I bey  nr  denned  as  strings  that  can  he  decomposed  into  .a  sequence  of 
substrings  tecnidmg  the  » ousiniciinn  of  that  foimula  or  tmn  from  elementaiy  fonmilas  and 
individual  vanables,  arnudnig  io  the  usual  bnmatioii  mles  (see  appendix  2 r>  for  the  list  of  axioms). 
These  sequences  are  defined  by  the  piedirate  TERMSEQ  for  teims  and  FRR  for  wffs.  A sequence 
satisfies  the  piedic.ite  TERMSEQ  if  it  represents  the  history  of  the  construction  of  its  first  element  (the 
term  to  he  defined),  smiting  fimu  symbols,  functions  and  individual  variables.  Similarly,  a string  is  a 
wff  if  there  mists  a sequence  which  satisfies  the  predicate  FRR  and  represents  the  history  of  the 
construction  of  that  wff  from  elementary  foimnlas  and  the  logical  connectives 
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SECTION  3 THE  PROOFS 

In  this  section  we  look  at  the  proofs  appearing  in  the  appendices,  In  order  to  explore  the  features  of 
FOL  that  need  improving  and  their  use  In  carrying  out  formal  proofs. 


Section  3.1  A look  at  sorts 

As  already  noted,  the  primary  difference  between  the  two  axiomatlzctions  we  presented  is  the 
Introduction  of  a many  sorted  logic  In  the  earlier  version  of  FOL  there  was  no  facility  for  creating 
- sorts.  but  It  soon  became  evident  that  iclativization  of  wffs  to  predicates  was  desirable  The  notion 
of  partially  ordered  sorts  was  a natural  outgrowth  The  axioms  In  the  sorted  logic  are  simpler  and 
more  readable  and,  most  important,  proofs  are  considerably  shorter  First  of  all,  in  the 
axiomatization  clone  in  the  eailier  version  of  FOL  the  partial  order  of  sorts  wasn’t  explicit  and  was 
to  be  derived  as  a theoiem  In  the  proofs  shown  in  the  appendices  these  theorems  appear  as 
dependencies  At  the  moment  FOL  has  no  facility  for  using  already  proved  statements  as  lemmas  In 
making  new  proofs  In  FOL  tlreie  is  also  the  possibility  of  declaring  for  each  function  symbol  the 
sorts  of  its  arguments  and  of  its  value.  These  sorts  were  defined  in  the  original  version  by 
additional  axioms  For  example,  together  with  the  definition  of  the  functions  sbt  and  sbv,  the 
second  axiomatization  has  two  extra  axioms 

Vx  ♦ II  .((INDVAR(x)  a TERM(i)  a FORM(fl))  a FORM(sbt(x,t,f  I )));; 

Vxl  x2  11  ((INDVAR(xl)  a lNDVAR(x2)  a FORM(fl))  a FORM(sbv(xl ,x2,H )));$ 

Proofs  are  shorter  in  a many  sorted  logic.  As  an  example,  we  can  examine  the  two  proofs  in 
appendices  5.1-2  and  5.5-6  The  second  proof  is  longer  because  the  explicit  assumption  that  x Is  an 
individual  variable  and  » Is  a wff  must  be  made,  and  the  symbol  a must  be  introduced  at  the  end  of 
the  proof,  to  discharge  this  assumption  Note  that  in  this  proof  the  statements  labeled  TH2  and  TH3 
appear  as  dependencies  and  the  ptoof  would  have  been  even  longer  if  we  had  proved  them  there. 
Another  difference  between  the  two  proofs  is  that,  in  the  second  one.  we  had  to  use  the  axiom 
previously  mentioned  stating  that  the  lesuit  of  substituting  a term  t for  every  free  occurrence  of  a 
variable  In  a wff  is  still  a wff.  The  diffeient  axiomatization  of  wffs  and  terms  only  influences  the 
length  of  the  proofs  in  appendix  3 I ,-2,-3  All  the  other  proofs  are  shorter  only  due  to  the  presence 
of  sorts  in  FOL  Furthermoie,  note  that  proofs  in  the  second  axiomatization  have  more 
dependencies  since  all  the  theorems  about  the  partial  order  of  sorts  have  been  assumed. 


Section  3.2  The  unify  and  tautology  commands 

FOL  proofs  are  greatly  simplified  by  the  existence  of  the  commands  TAUT  and  TAUTEQ  They  decide 
If  a given  formula  is  a tautological  consequence  of  a specified  set  of  wffs.  The  difference  between 
TAUT  and  TAUTEQ  is  that  the  latter  uses  properties  of  the  equality  and  the  former  doesn’t.  These 
commands  make  proofs  shoiter  since  they  allow  to  decide  every  propositional  sentence  in  one  step 
As  a consequence,  the  rules  of  inference  most  frequently  used  manipulate  quantifiers.  The  form  of 
almost  all  the  proofs  we  presented  i the  same  Fust  of  all,  the  right  instantiations  of  the  relevant 
axioms  and  theoiems  are  clone.  Then  the  propositional  consequences  are  asserted  by  using  TAUT 
and  TAUTEQ  The  tautology  commands  cannot  of  course  manipulate  the  quantifiers  appearing  In 
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statements.  Hence,  the  sratemmis  |>i odncrrl  hy  tlirrn  have  quantifiers  as  mam  symbols  or  it  is 
necessary  to  introduce  a quantifier  to  proceed  in  ti.e  proof  After  the  right  introductions  or 
eliminations  have  been  done  to  them,  the  tautology  commands  are  used  again  This  process  is 
iterated  until  the  completion  of  the  pioof. 

The  command  UNIFY  decides  if  a given  wff  can  he  obtained  by  instantiation  of  quantified  variables 
or  introduction  of  them  foi  fiee  occimences  of  variables  or  terms  in  a second  wff  The  code  for  this 
command  has  been  written  by  A slink  Chandra  and  is  still  in  an  experimental  stage.  In  the  proofs 
presented  heie,  this  command  lias  been  essentially  used  for  the  simultaneous  Introduction  of  the 
existential  qjantiflei  As  an  example,  considei  the  following  assumption. 

1 Vx.(P(x)MQ(M  c <2)aVI  R(l))>  (1)  ASSUME 
the  command 

unify  3it.(P(x):>3f.(Q(f)/  R(r(1)))),1; 
deduces  hi  a single  step 

2 3x  (P(x)s3f  (0(f)AR(R(l))5)  (6)  UNiFY  I 

A good  example  of  a combined  use  nf  thesr  featuics  is  found  in  appendix  3.3: 

1 9 FRR((x  I r* n f)  cc  SO)  (SEQtJf  NCE>»x I Ron  t)  cc  SQ)a(((xI  Ron  f)  cc  U)/ 

SLAMBDAa(ELF (r.c.ir((xl  Ron  t)  cc  5Q))v(FRR(r.cdr((xl  gen  «)  cc  S0))a 
3sl  r.  2 . ( S T RING  (-.  I ) a (ST  RING  (o  2 ) a ( (-.c  ar  ( (-.  I r.on  f)  cc  SQbNEG(sl  )a 
findd ,s I ,scdr((xl  Ron  f)  cc  ^Q)))vi('.car({xl  Ren  0 cc  SQMsl  dis  s2)a 

<ind(2,s  1 c s2,5cdr((*t  gen  f)  cc  SQ)))v{(scat  ((xl  pen  0 cc  SQMsl  con  s2)a 

find(2,sl  c s2,scdr((xl  ,;en  f)  cc  SQ)))v((scar((xl  pen  f)  cc  SQMsl  impl  s2)a 

find(2,s  I c s2,scdr((xl  p.on  f)  cc  SQ)))v((scar((xl  Ren  f)  cc  SQMsl  R«n  s2)a(INDVAR(sI  )a 

findd  ,s2,scdr((xl  Ron  f)  cc  5Q))))v(r.car((xl  Ron  f)  cc  SQMsl  «x  s2)a(INDVAR(sI  )a 
findd  ,s2,scdr((xl  Ron  f)  cc  S0)))>)))>)»))»  — VE  WFFI  (xl  E*n  f)  cc  SQ 

20  STRING (x I )a(STRING(I )a ((r.c ar ( (x I Ren  f)  cc  SQhNEG(xl)A 

findd ,xl,r,cdr((xl  Ron  f)  cc  SQ)))v((5car((xl  pen  f)  cc  SQMxl  dis  f)A 

find(2,xl  c f,ficdr((xl  Ron  I)  cc  SQ)))v((rcar((xl  Ron  f)  cc  SQMxl  con  I)a 

find(2,xl  r.  f,5cdr((xl  Ron  f)  cc  SO)))v((r.car((xl  Ron  f)  cc  SO)- (x f impl  f)A 

find(2,xl  c f,scdr({xl  pen  f)  cc  SQ)))v((r.car((xl  Ron  f)  cc  SQMxl  Ren  f )a(INDVAR(x I )a 

findd |f,scdr({xl  ro*i  f)  cc  SQ)))M'.c,ir((xl  Ron  f)  cc  SQMxl  »x  dA(INDVAR(xl  )a 

findd, f,scdr({xl  Ron  f)  cc  SO))))))))))  (I  2 3 4 5 6 7 8 II)  — TAUTEQ  1:19 

21  3s I s2.{STRING(sl)A(STRING(52)A((5car((5l  Ron  f)  cc  SQbNEGfsl  )a 
findd , si  ,scdr((xl  Ron  f)  cc  SQ)))v((sc.ir((xl  Ron  f)  cc  SQMsl  dis  s2)a 
find(2,sl  c s2,scdr((xl  Ron  I)  cc  S0)))v((r,car((xl  gen  f)  cc  SQMsl  con  s2)a 
find(2,sl  c r.2,scdr{(xl  Ron  f)  cc  SQ)))v((scar((xl  Ron  f)  cc  SQMsl  impl  s2)a 

find(2,sl  c s2,scdr((xl  pen  f)  cc  SQ)))v((r.car((xl  Ron  f)  cc  SQMsl  Ren  g2)a(INDVAR(s1  )a 
findfl  ,s2,scdr((xl  Ron  f)  cc  $Q)))Mscar((xl  Ron  f)  cc  SQMsl  ox  s2)a(INDVAR(sI  )a 
findd  ,s2,scdr((xl  Ren  f)  cc  SQ>))))))»>)»»  (12  3 4 5 6 7 8 11)  — UNIFY  20 


Line  19  is  the  instantiation  of  an  axiom.  Line  20  is  generated  by  the  command, 
TAUTEQ  I9:*2*2«2«2»2«I«I[sIH  : s2*-xl]  1:19; 
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note  how  the  use  of  the  FOL  subpart  designators  allows  us  to  mention  the  desired  subpart  of  19 

without  having  to  retype  it.  In  addition  we  can  do  the  appropriate  substitutions  Line  21  Is  lust  a 
use  of  UNIFY  ‘ s JUM  a 


UNIFY  1 9:«2«2»2»2*2  20; 

Because  we  can  mention  the  conclusion,  without  writing  it  down  explicitly,  the  amount  of  typing 

necessary  is  severely  .educed  Without  UNIFY,  line  21  would  have  required  two  3-lntroductions  and 
the  commands  would  have  been 

31  20  xl«-tl  OCC  1, 2,3,4, 7, 8, 1 1 ,1  2,1  5,1 6,! 9,20,23,24; 

31  20  < *s2  OCC  1 ,5,9,1 3,1  7,1 8,2 1 ,22; 

We  do  not  enter  into  a detailed  discussion  of  the  command  UNIFY.  It  is  our  intension  to  do  It 
elsewhere  It  should  be  thought  of  as  the  routine  which  handles  quantifiers  In  "simple"  inferences 
As  seen  above,  the  saving  to  a user  can  be  large  r 
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Thr  drsi.r  to  irp.rsent  mathematics  m a compute,  m a feasible  way  certainly  lenuues  the  facility  to 
discuss  metamat hematical  notions  The  axiom atization  presented  here  only  treats  the  syntactic  part 
of  the  problem  Any  m-ntiun  of  the  models  involved  needs  the  addition  of  set  theory  to  the 
axiomatiration.  Ilowevei.  it  is  deal  hum  the  simple  theorems  we  proved  that  any  piactical  system 
needs  more  extensive  featn.es  even  to  do  a satisfactory  job  of  writing  down  the  theorems  we  might 


An  impoi  taut  point  fm  inline  wot  I.  is  how  (m  a piactical  way)  to  use  these  theorems  Consider  for 
instance. 


Vxl  x2  f.(tJEW(xl  R«n  (x2  p,«n  f))  = QEW(x2  5«n  (xl  f.sn  f))) 

What  we  mean  by  teller  tion  pnnciple  is  a rule  of  FOL  which  says 


//BEW(I)  //m  meta  FOL 

/ 

///<  /inFCL 


That  is.  il  in  Hie  axinmati?  itnni  of  the  meiamathematics  of  FOL.  we  can  piove  the  existence  of  an 
FOL  pi  oof  of  f,  then  we  can  issnt  < in  FOL.  Suppose  we  have  a proof  in  FOL  of  Vx  y.wff  Then 
instantiating  the  above  theoiem  gives  ns 

BEW(x  R«n  (y  Ren  wff))  a DEW(y  Ren  (x  Ren  wlf)) 

Since  we  stalled  with  a pmof  ot  Vx  y.wff  in  FOL  and  BEW  rep.esents  the  proof  predicate  for  FOL 
we  can  conclude  BEW(x  R**n  (y  R«n  wff))  Using  modus  ponens  we  get  BEW(y  gen  (x  een  wff))  and 
using  the  above  ...le  we  can  com  hide  Vy  x wff  m FOL  " 


Thr  exact  foim  of  smh  a mlr  ie. pmes  mote  examples  of  ptoofs  and  is  one  of  the  mam  reasons  for 
doing  the  example  n,  the  memo  It  is  not  j.m  a proof  checking  exercise,  but  a case  study  for 
fundamental  questions  of  leptru  ntiiig  mathematical  infoimation  in  a computer  Ustnp 
nietamathematics  also  piepaies  the  w.(y  for  moie  compichensive  systems  which  can  formally  discuss 
how  they  reason  That  is  exactly  what  the  nietamathematics  is  good  for 
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APPENDIX  1 

THE  AXIOMS  IN  THE  MANY  SORTED  LOGIC 


. 

k 


LI  Natural  numbers 


AXIOM  NUMB: 

Vnl  n2  n3 
Vnl  n2 
Vnl 

Vnl  n2 
Vnl 

Vnl  n2 
Vnl. 

Vnl  n2. 


Inl*n2  = (nUn3  3 n2‘n3)), 
(nlrn2  a succlnl  )=succ(n2)), 
0/<succ(nl ), 

(succ(nl )=succ(n2)  a nl*n2)  . 
nl ♦fl=nl  , 

nl«succ(n2)*succ(nl»n2)  , 

nl *0^0  , 

nl  *succ(n2)e(nl  *n2)»nl  •; 


AXIOM  1NDCT: 

(F(0)AVn.(F(n)3F(n*l)))  3 Vn.F{n)  j; 


AXIOM  DEFN: 

Vn. 

Vnl  n2. 
Vnl  n2  n3. 
Vnl  n2. 
Vnl  n2. 

Vnl  n2. 


(succ(n)-l  )=n  , 

succ(n|)-n2*nl-(n2-l)  , 

(nl<n2  • 3n3  (n3/0  a n|*n3.n2)) , 
(nl<n2  « (nl<n2)  v (ni*n2))  , 
(n2>nl  » nl <n2)  , 

(n2*nl  * nl  <n2)  ;; 


1-2  The  set  of  symbols 


AXIOM  SYM: 

V..  (SYM(a)  . a=LPARSYW  v a^RPARSYM  v a-ORSYM  v a*  AND  SYM  v ..lupcvu 
..FALSESYM  v a.FQRALLSYM  v -EXISTS YM)„  #‘IMPSYM  v 


1.3  Strings 


AXIOM  STRING: 

Vs 

Vsl  s2 
Vsl  s2. 
Vsl  s2 
Vsl  s2 
Vs 
Vs 

Vsl  s2  s3 
V». 

Vs 


Vsl  <2. 
Vs 

Vs. 


s=car {•;)  c cdr(s), 

(sHLAMBDA  3 car (s  1 c s2)*car(s2))  , 
(sl/LAMBDA  3 car(sl  c s2)=car<sl )) ' 
(sHLAMBDA  3 cdr(s  1 c s2)=cdr(s2))  ' 
(si  ^LAMBDA  3 cdr (s  1 c s2)-cdr(sl )) ' 
(s  c LAMBDA=IAMBDA  c s)  , ' 

s c LAMBDA^  , 

(si  c (s2  c s3)=(sl  c s2)  c s3)  , 
(len(a)-l  v a=LAMBDA) 
l«n(s)>0  , 

l*n(sl  c s2)sl«n(sl  )«l*n(s2)  , 

(l*n(s)=l  = ATOM(s))  , 

8 gl  s « LAMBDA  , 


Mia; 


■ 


. 

i 
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I 

I 


Vs  I P,l  5-car («;)  , 

Vs  n ((n>l  )=>((n  gl  s)=((n-l ) gl  cdr(s))))  ;; 


AXIOM  SU8STRDEF: 

Vnl  n2  si  «2 

Vnl  n2  si  s2 
Vs  1 s2 


(SUOSTFfsl  ,*2,nl  ,n2)  = (lon(s2)=n2-nl  «l  A(Vn  (n>n I Ar,<n2  a 
n Rl  nl'(n-nM)  gi  s2))», 

(SlinsTPfs 1 ,5  2tn  I ,n2)  r subslringfsl ,r*l  ,n2)=s2) 

(SUUS(r.l,-.2)  * 3nl  n2  SUBS TP(s  1 ,s2,n I ,n2));; 


TIip  value  of  subslringfr. I ,nl  ,n2)  the  MiliMinig  of  s| 
si  and  whose  list  element  is  the  ii^th  elemenr. 


whose  first  element  is  the  n lrh  clement  of 


AXIOM  DISEQ: 

Vfil  r2  (-(rI -r2)  « rI/»2)  ;; 

AXIOM  EOS: 

Vsl  s2  (Vn(n  gl  sl*n  gl  s2)  * s I =s2)  ;; 


AXIOM  COMP: 

Vf  0(f)  {LPAKSVM  c f)  c RPAPSYM  , 

Vfl  12  Mdr.  f?-(e(f| ) t ORSYM)  t e(l2)  , 

Vfl  12  II  nnpl  f2-(o((l ) C IMf’SYM)  c e(»2)  , 

V*  n*R(l)-(f  nnpl  TALSfSYM)  , 

Vfl  f2  fl  con  f2Me{fl)  c ANDSYM)  c o(»2) , 

V*  <2.  * p.on  f2-(f'0RALLSYM  c x)  c 12  , 

Vxl2  x ax  I2^(EXISTSYM  c x)  c 12  ;; 


1.4  Formulas 
AXIOM  TERM: 
Vn  s. 
V'.. 

AXIOM  WFF: 

Vs 

Vs 


TFRM'.fQ  (II.IAMUDA)  , 

(TERM  .1  OKs)  (3nl  (TERMfr.ubsl  rin®(5,l  ,n! ))  a 
TU-M'UO(n-l  ,substnn/>,(s,nl  *1  ,lon(s))))))  , 

(TEPM('  ) INDVAR(s)  v Do  fn  (fmcar(s)  a marily(fn)  A TERMSEQ(n,cdr(s))))  ;; 

,Elf  ™.ss;rEopApow  v * p * 

(FORM(s)  - (ELF  (s)  v 

3*  I ((srx  Ron  f)  V (srx  ex  I))  V 

311  12  ((-.  = ||  dis  12)  V (s  = 1 1 con  12)  v (s  » II  impl  12))  v 
3*  t^nog  (I)))  ;; 


1.5  Scqnrnrrs 
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Vsql  cq2. 

Vsq 

Vsq 

Vsql  sq2  *q3. 
Vs. 

Vsq 

Vsq!  sq2. 

Vsq 

Vsq. 

Vn  sq 


(sql/SLAMBDA  a scdr(sq!  it  tq2)*scdr(cql ) cc  sq2) 
sq  cc  SLAMBDA»SLAMBOA  cc  sq  , 
sq  cc  SLAMBDAesq  , 

(sql  cc  (sq?  cc  sq3Msql  cc  sq2)  cc  sq3)  , 

(slen(s)=l  vs*SLAMBDA)  , 
slen(sq)>f)  , 

slen(sql  cc  sq2)=slen(sql  )»s)*n(sq2)  , 

0 sgl  sq=SLAM8DA  , 

1 sgl  sq=r.car(sq)  , 

((n>i ) a ((n  Sfcl  cq)=((n-t ) sgl  scdr(sq))))  ;; 


AXIOM  SUBSEQDEF: 

Vnl  n2  sql  sq2  (SUQ3EP(sql(,q2,nl,n2>  * (slen(sq2).n?-n| . ) a 
(Vn  (n>nl  An<n2  a n sgl  sq2-(n-nl*l ) sgl  sql ))))  , 

Vnl  n2  sql  sq2.  (SU0^EP(sq| , sq2.nl  n2)  ; subseq(sql ,nl ,n2)*sq2) 

Vsql  sq2.  (SU8SSE(sql  ,sq2)  * 3nl  n2  (SUBSEP(sql ,tq2,nl ,n2)))  ;; 

AXIOM  EQSQ: 

Vsql  sq2.  (Vn.(n  sgl  sql»n  sgl  sq2)  a sql*sq2)  ;; 


1.6  Free  and  bound  variables  and  the  substitution 


AXIOM  BOUNDV: 
Vx  n f. 


AXIOM  FREEV: 
Vx  n » 
Vx  t. 


(GEB(x,n,f)  ■ 3s  1 s2  tl  (l«n(s  1 )♦!  <n  a n<(l«n(f)-l«n(s2))  a 

(x*n  gl  f)A((t=(s!  c ((x  gen  fl ) c s2)))v(».(nl  c ((x  ex  (1 ) c s2)))))) 


(FRN(,  n, f)  » (x*(n  gl  t)  a -GEB(x,n,f)))  , 
(FR(x,l)  f 3n FRN(x,n,t))” 


AXIOM  FIRSTFRDF: 
Vx  n t. 
Vx  n f 


(FIRSTFREE(x,n,t)  ? (FRN(x,n,<)  a VnJ  (x»nl  gl 
(FIRSTFREE(x,n,f ) s lirsttreeocc  (x,f )=n)  ;; 


= (nl  >n  v GEB(x,nl ,()))))  , 


AXIOM  XFREEOCCDF: 
Vx  k n I 


Vx  k n I 
Vx  k n t 
Vx  k n f. 

AXIOM  SUBSTDFi 

Vx  » «1  12. 


Vt  f2  n2 
Vn  tl  nl  12. 


(KTHFREEOCC(x,k,n,f)  • ({k=fl  a o= ' 1 ) v 

(n=lonft)  a Vn2  (n2'>Kth*roeocc(x,K- 1 ,f ) a -FRN(x,n2,f)»  v 
(FRN(x,n,f)  a Vnl  ((nl  <k  a nl>0)  3 3n2  (n2<n  A KTHFREEOCC(x.nl  .n2, <)))))). 
(KTHFREEOCC(x,k,n,t)  f klhlr0eorc(x,k,f):n)  , ’ ’ 

(KTHFREEOCC(x,k,r,t)  d numbtreeocc(x,n,f)*k), 

(numbtreoocc(x,n,t)=k  s (KTHFREEOCC(x,k,n,t)  v 
(n<klhfrpeocc(x,k,t)  a n>kthtreeOcc(x,k-l , !))));; 


(50 T (x,l,f  1 ,f?)  ? Vnl  n2.((n2-\vumuiroeocc\xtni  ,ti  ;v(ien(i^« 
((-INOVARCnl  gl  tl ) a nl  gl  II  . n2  gl  I2)a 
(INDVAR(nl  gl  II)  3 ((FRN(x,nl ,11 ) 3 S U8T(t,t2 ,n2 ))a 

(-FRN(x,n I ,t  I JaINVART (nl  ,1 1 ,n2,l2 ))))))), 
(SUBT(t,t2,n2)  » Vx2  k (((k  gl  I)  * x2)  3 FRN(x2,n2-(len(t)-k),»2))), 
(INVART(n, tl.nl, 12)  . ({GEB(nl  gl  I2,nl,l2)  . GEB(n  gl  fl.n.f  1 ))A 
(FRN(nl  «l  12, nl  ,12)  * FRN(n  gl  ll,n,fl))  a nl  gl  »2*n  gl  (1)) 
(SBT(x,t,tl,t2)  x sbt(x,t,tl  )>(2)  ;; 


Vx  t »l  12 
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AXIOM  SUBDer: 


vxi  xc  n u 4bBVtxl(x2(fl  ,12) 


* « i 


(INDVA«(n  f,l  fl)  = ((FRNfxl  ,n,f  1 )=FRN(x2,n,f2))  a 
i-FRNfx  1 ,n,f  1 )=INVARV(n,f  I,f2)))))), 

Vntl  12.  (INVARV(n,fl,f2)  ' ((GEB(n  p,l  f2,n,f2)  • GEB(n  gl  f 1 ,n,fl  ))a 

w i,i,o  fFRN(n  fi1  ,2,n,f2)  » FRN(n  gl  f 1 ,n,f  1 ))  a n {I  f2  » n gl  fl)) 
Vx  xl  fl  (2.  (SBV(x,xl ,fl ,f2,  s sbv(x,xl,fl  )=f 2);;  8 ’ 


1.7  Rules  Oi  inference 


AXIOM  ANDIRUL: 

v.,  p.,  * “ ’*>  * - « * 

Vtq  pl  w,E’,i  ZLZ&m?'* A A "" con 

AXIOM  FALSERULs 

Vsq  pfl  p<2.  (FAlSEI(sq,pfl,pf2)  = 3fl  .((scdr(sq)=(pf|  cc  pf2))A 
v , J«ar(,''t!)lFALSFSVM)  a (neg(f|)=scar(pfl))  a (fl*i:car(pf2)))) 

Vsq  Pi  (FALSEE(sq,pf)  * 3!  «scar<pf)sFAL$ESYM)  a »*scar(sq)  a scdr (sq)-pf 

AXIOM  1MPLRUL: 

Vsq  pfl  Pf2  (IMPLE(sq,pf  I ,pf2)  * 3fl  (2  ((scdr(sq)--(p,]  cc  p(2))a 
w (scarfpfl );  <f  I imp!  f2))  a (scar(sq)=f2  a (scar(pf2)  » fl ))) 

Vsq  pill.  (IMPLIO(r.q,pf,f  I ) a (scdr(sq)*pf  a 3f  2.  ( (scar  (sq)-(f  1 fmpl  <2))a  ’ 
(f2*scar(pf ))  a 3n.(f I . (n  sgl  pf))))). 

(IMPLKsq.pf)  « 3f  IMPLIDUq.pf.fl);. 


Vsq  pf 


AXIOM  NEGRUL: 
Vsq  pf  f 

Vsq  pf 
Vsq  pf  I. 

Vsq  pf 

AXIOM  ORRUL. 

Viq  pf 


(NOTIDfsq.pf.f)  «■  (scdr(sq)*pf  a scar(sq)*f  A (scar(pf)=FAL$E$YM)  A 
3n  (n  -.gl  p))=f))  , 

(NOTl(rq,pf)  3 3f  NOTlDf-.q.pf.f), 

(NOTEO('.q,pf,f)  * (scdr(-.q).pf  a (scar(pf)  . FALSESYM)a 
3n «n  sgl  pf)=f>  a (f-r.ep,(r,car(sq))))), 

(NOTEfsq.pf)  a 3f  NOTEDIsq.pf.f);; 


Vsq  pfl  pf 2 p13  fl  12 


Vsq  pfl  pf2  pf3. 


AXIOM  EXRUL: 

V<iq  pi  x I. 


Vsq  pfl  p!2  xl  x2  fl 


Vsq  pfl  pf 2 xl  x2 
Vx  pi  1 


(ORI(sq.pf)  - (scdr(-.q)--pf  a 3fl  f2.((scar(sqMfl  dis  f2))  a 
f ! *scar(pf»  v (f2rScar(pf)))))1 

(ORED(sq,pf I ,pf2,pf 3,f I ,f2)  s (scdr(sq)r(pf | Cc  (pf 2 cc  pf3))  a 
(scar(pfl)r(fi  dis  12)  a 3f3(scar(pf2M3)  a scar(sq)=f3  a 

,r.irC,ar*pf3^r>^  A 3nl  *nl  SR|  Pf2)sM  )A3nl  (nl  sgl  pf 3 )■< 2 )) ) 

(0RE(sq,pf|,pf2,pf3)  , 3f  1 f 2.0RED(sq,pf  I ,p,2,pf 3,f  I ,f 2 ));;  ’ 

EXI(r.q,pf,x,l)  - 3« I ((scdr(sq).pf I ) a (scar(sq)r(x  ax  fl))  a 
scar(pf):sbt(x,l,f| )))  , " * 

(EXEO(r.q,pf  | ,pf2,x  I ,x2,f  I ) * ((scdr(sq)r(pf  | cc  p|2))  a 
(rcar(pf  1 ):(x | ex  f I ))  a (scar(sq)rscar(pf2))  a 
3n((n  sgl  pf2)=sbt(xl,x2,fl)  a EXAPPL(x2,pf2,f  I )))) 

‘ 3,1  .EXED(«q,pfl(pf2,xl,x2,»l), 

(EXAPPL(x  pf  f)  * (-FR(x,scar(pf))  a -FR(x,f)  a Vf|  (DEPEND(pf,f  I ) a 
'FR(x,f  I ))));; 


r 
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AXIOM  GENRUl: 

Vsq  tql  x t.  iGENEfsq.sql.x,!)  « (scdr(sq)*sql  A PROOFTREE(sql ) A 

3(  (scar (sq  1 )*x  g«n  ( a scar(sq)  ■ sblfx,),!)))), 

Vsq  sql  xl  x2.  (GENI(sq,sql ,xi,x2)  > (scdr(sq)=sql  A PR00FTREE(sql ) a 

3f.(scar(sq)*x  1 g«n  « a star(sql)  ■ sbt(xl ,x2,<)  a APGENI(x2,sql )))), 
Vx  sq.  (APGENI(x.sq) * (VI.(CtPEND(sq,l)  a -FR(x,f)))  a PROOFTREE(sq)), 

Vpl.3x.  APGEN'Kx.pf);; 


1.8  Deducfion 


AXIOM  PROOF: 

Vtq.  (PROOFTREE(sq)  = (FORM('.q)  v 

3pl.(0RI(sq,pl)  v ANOE(sq.pf)  v FALSEE(sq,pl)  v NOTI (sq.pf ) v NOTE(sq,p()  V 
IMPLI(sq,pf))  v 

3p(  x I (GENI(r.q,pf,x,f)  v GENE(sq,p(,x,()  v EXI (sq,pf ,x,t ))  v 

3p(l  p<2  (ANDKsq.pfl  ,pf2)  v FALSEKsq.pl I ,p!2)  v IMPLE(sq,pll  ,p(2))  v 

3pf  I pf2  xl  x2  EXE(sq,pf I ,pf2.x I ,x2)  v 

3pll  pf 2 p!2  p(3  0RE(sq,p(l  ,p(2,p(3)));; 

AXIOM  DEPNDG: 

Vsq  f.  (DEPEND(sq,f ) s SUBSSE(f.sq))  , 

Vsq  f.  (I«sq  a DEPENDS, I))  ;; 

AXIOM  DEPEND: 

Vpl  p(l  «.  ((pllsscdr(pf)  a (DEPEND(pM)  » DEPEND(pll  ,1)))  • 

(ORKpl.pll)  v ANDElpf.pM)  v FALSEE(pf,pf  1 ) v 

3«l  ({NOTID(pf,pf  1,11 ) v NOTED(pf,p(l,(l ) v lMPLID(pf,pf  1 ,(I ))  a fl/f)  v 
3x  t (GENKpf.pfl ,x,l)  v GENE(pf,pfl,x,l)  v EXHpl.plJ ,x,t))))  , 

Vpl  pH  pf 2 f.  ((((pH  cc  p!2=r.cdr(p»))  v (p(2  cc  p(l  =scdr (pi )))  3 

(OEPEND(pU)  * ((DEPEND(pf  1 ,f)  v DEPEND(p(2,())))  * 

( ANDKpf, pH  ,p( 2)  v FALSEKpf.pfl  .pf2)  v IMPLE(pf .pf  1 ,p«2)  v 
3x1  x2  f I (EXEO(pf,pf I ,pf2,xl ,x2,fl ) a f/f  1 ))). 

Vp(  pH  pf 2 pf3  ( (((((pH  cc  (pf2  cc  p(3))=scdr(pf))  v 

((pH  cc  (p(3  cc  p(2))-scdr(p())  v 
((pf 2 cc  (pH  cc  pf3 ))=scdr (pf ))  v 
((pf2  cc  (pf3  cc  pH  ))*scdr(p())  v 
((pf 3 cc  (pH  cc  pl<:)):scdr(pO)  v 
((pf3  cc  (pf 2 cc  pH  )>=scdr(pf)>)  = 

(DEPEND(pf.f)  f (DEPEND(pfl.f)  v DEPEND(pf 2,f ) v 
DEPEND(pf3,f))))5 

3(1  f2.(ORED(pf, pfl ,pf2.pf3,f I,f2)  a l/ll  a (^(2))  ;; 

AXIOM  NDEPND: 

Vpf  1 pf 2 ( ((NOTIO(pf  1 ,p(2lf)  v NOTED(pf I,pf2,f)  v 1MPLID(pf  1 ,pf2,f » 3 

-DEPEND(pf  1 .<)). 

Vpf  1 pf 2 pf 3 xl  x2  IX  EXED(pf  I ,pf2,pf3,x I ,x2,()  a - DEPEND(pf  I ,f ))  , 

VpH  pf 2 pf 3 pf 4 (1  (2.  (ORED(pfl  ,pf2,pl3,pf4,f  1,(2)  3-  DEPENDCpf  1 ,f  1 ) A 
'DEPEND(p(l  ,(2));; 

V(.  (BEW(()  « 3sq  (PROOFTREE(sq)  a f » scar(sq)  A VII  (DEPEND(sq,(l ) » 

AXIOM((l ))));; 


AXIOM  THEORY: 
Vx  ( 


(AXIOM(i)  a 'FR(x,l»;; 
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AXIOM  INFVAR: 

Vi.3x.Vn. 


x 


ii 

*• 


« £<  * t 
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APPENDIX  2 

THE  AXIOMS  IN  THE  LOGIC 


2.1  Natural  number; 


AXIOM  NUMB: 

Vnl  r2  n3,  ((INTEGER(nl ) a INTEGER(n2)  a INTEGER(n3))  a (nl«n2  a (nl«n3  a n2«n3))) 
Vnl  n2.  ((INTEGER(nl ) a INTEGER(n2))  a (nl«n2  a succ(nl  )*succ(n2)))  ' 

Vn!.  (INTEGER(nl)  a O/sucdnl), 

Vnl  n2.  (INTEGER(nl ) a INTEGER(n2))  a (succ(nl ) ■ succ(n2)  a nl  ■ n2)) 

Vnl.  (INTEGERlnl ) a nkfbnl), 

Vnl  n2.  ((INTEGER(nl)AlNTEGER(n2))  a nl  ♦ succ(n2)  ■ succlnl  ♦ n2)) 

Vnl  (INTEGERlnl ) a nl  *0=0), 

Vnl  n2.  ((INTEGERlnl ) a INTEGER(n2))  a nl  *succ(n2).(nl  *n2)»nl );; 

AXIOM  INDCT: 

(F(0)  a Vk.(INTEGER(v)  a (F(x)  a F(k«1  ))))  a Vx. (INTEGERS.)  a r(x));; 


AXIOM  DEFN: 

Vn. 

Vnl  n2. 
Vnl  n2  n3. 

Vnl  n2. 
Vnl  n2. 

Vnl  n2. 


(INTEGER(n)  a (succ(n)-l  )=n) , 

((INTEGERlnl ) a INTEGER(n2))  a succ(nl  )-n2*nl -(n2-l )), 
((INTEGERlnl ) a INTEGER(n2)  a INTEGER(n3»  a 
(nl<n2  s 3n3  (n3/0  A nl  *n3=n2)>), 

((INTEGER(nl)  a INTEGERS))  a (nl<n2  * (nl  <n2)  v (nl«n2))), 
((INTEGERlnl ) a INTEGER(n2))  a (n2>nl  ■ nl  <n2)), 
((INTrCCR(nl ) a INTEGERS))  a (n2*nl  • nl<n2))p 


2.2  The  set  of  symbols 
AXIOM  SYM: 

Va.  (SYM(a)  * a«LPARSYM  v e=RPARSYM  v a«0RSYM  v a«AN0SYM  v a-IMPSYM  v 

a«FALSESYM  v a*FORAllSYM  v a»EXISTSYM)  ;; 


2.3  Strings 
AXIOM  STRING: 

Vs  (STRING!;)  a s»ear(;)  c cdr (s))  , 

Vs  I s2.  ((STRING(sl)  a STRING(s2))  a (sl«LAMBDA  a car(sl  c s2)*car(s2))) 

Vs  I s2  ((STRING(sl)  a STRING(;2))  a (sl/LAMBDA  acar(sl  c s2)»car(sl )))’ 

Vsl  s2.  ((STRING(sl)  a STRING(s2»  a (sM.AMBDA  a cdr(sl  c s2)«cdr(s2)))’ 

Vsl  s2.  ((STRING(sl)  a STRING(;2))  a (si /LAMBDA  a cdr(sl  c s2)«cdr(sl )))' 

Vs.  ((STRINGS)  a (s  c LAMODA=LAMBDA  c s)), 

Vs  (STRINGS)  a (s  c LAMBDA=s», 

Vsl  s2  s3.  ((STRING(sl)  a STRING(s2)  a STRING(s3))  a (si  c (s2  c s3)«(sl  c s2)  c «3)) 
Vs  (STRING!-.)  a (lon(a)--l  v a=LAMBDA)),  ’ 

Vs.  (STRINGS)  a lon(;)>0), 

Vsl  s2.  ((STRING(sl ) a STRING(s2))  a len(s!  c s2)>lan(sl )*lan(s2)), 

Vs.  (STRING(s)  a (len(s)«l  a AVOM(s)), 
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Vs.  (STRING(s)  30.1  s»LAM30A), 

Vs,  (STRING(s)  a 1 g|  s*c»r(s)), 

Vs  n.  ((STRING(s)  a INTEGER(n))  a ((n>  1 ) a (fn  jl  s)»((n-l)  gl  cdr(u))))), 

AXIOM  SUBSTRDEF: 

Vnl  n2  si  s2.  ((IN FEGERtnl ) a INTEGER(n2)  a STRING(sl)  A STRING(s2))  a 

(SUBST?(s!,s2,nl1n2)  * (lon(s2)=n2*nl  »1  A (Vn.(n>nl  A n<n2  3 
n r!  s 1 =(n-nl  ♦ 1 ) gl  s2 ))))), 

Vnl  n2  si  t2.  ((INTEGER(nl)  a INTEGER(n2)  A STRING(sl)  A STRING(s2))  a 
(SUR STP(s  1 ,s2,n  1 ,n2)  » substring(sl,n!,n2)*s  , 

Vsl  s2.  ((STRING(sl)  a STRING(s2))  a ISUBS(sl,s2)  ■ 3n.  n2.$UBSTP(tl,s2,nl,n2)))j{ 

AXIOM  DISEQ: 

v*1  *2.  (-(S 1 *r2 ) f elrg2)  ;; 


AXIOM  EQS: 

Vsl  s2.  ((STRING(sl)  A $7RING(s2))  a (Vn.dNTEGER(n)  d (n  |l  tl>n  gl  s2))  » sl-a2))» 

AXIOM  COMP: 

VI.  (FOPM(f)  s (•(fHLPARSYM  c I)  c RPARSYM), 

Vf  1 12.  ((FORM((l)  a F0RM(I2))  a (II  dis  l2M*(f  1 ) c ORSYM)  c .(12)), 

V» I 12.  ((FORM(f I ) a FORM(f2))  a (II  imp!  I2).(.(f  1 ) c IMPSYM)  c .(12)), 

VI.  (FORM(I)  a neg(f)--(l  impl  FALSESYM)), 

VII  12.  ((FORM«l ) a F0RM(f2))  a (d  con  (2  )'(•{(  I ) c ANDSYM)  c #(12)), 

Vx  12.  ((INOVAR(x)  a FORM«2)>  3 (x  gsn  I2MFORALLSYM  c x ) c 12)  , 

Vx  12.  ((INDVAR(x)  a FORM(f2))  a (x  ox  »2)-(EXISTSYM  c x)  c (2)  ;; 


24  Sequences 


AXIOM  SEQ: 

Vsq.  (SEQUENCE(sq)  3 sq=scar(sq)  ct  scdr(sq))  , 

Vsql  sq2.  ((SEQUENCE(sql ) a SEQUENCE(rq2))  3 (sql-SLAMBDA  3 

scar(sql  cc  sq2)=scar(sq2))), 

Vsql  sq2.  ((SEQUENCE(sql ) a SEQUENCER?)}  a (sql/SLAMBDA  a 

scar(r.ql  ce  sq2)*Rcar(sql ))), 

Vtql  sq2.  ((SEQUENCER! ) A SEQUENCE(sq2))  3 (sql-SLAMBDA  3 

scdr(sql  cc  sq2):scdr(sq2))), 

Vsql  sq2.  ((SEQUENCE(sql)  A SEQUENCE(sq2))  a (sql/SLAMBDA  3 

scdr(sql  cc  sq2)*scdr(sql ) cc  sq2))  , 

Vsq.  (SEQUENCE(sq)  a sq  cc  SLAMBDA-SLAMBDA  cc  sq), 

Vsq.  (SEQUENCE(sq)  3 sq  cc  SLAMBDA«sq), 

Vsql  sq2  sq3  ((SEQUENCE(sql ) A SEQUENCE(sq2)  A SEQUENCE(sq3))  3 
(sql  cc  (sq2  cc  sq3)=(sq  1 cc  tq2)  cc  sq3)) 

Vs.  (STRING(s)  a (slenfsM  v s-SLAMBDA)), 

Vsq.  (SEOUENCE(sq)  a slen(sq)>0), 

Vsql  sq2.  ((SEQUENCE(sql ) a SEQUENCE(sq2))  a slsn(sql  cc  sq2)>sl«n(sql )»sl»n(sq2))  , 

Vsq.  (SEQUENCE(sq)  a 0 sgl  sq=SLAMBDA), 

Vsq.  (SEQUENCE(sq)  a 1 sgl  sq=scar(sq)), 

Vn  sq.  ((INTEGER(n)  a SEQUENCE(sq))  a ((n>l ) a ((n  sgl  sq)*((n-l ) sgl  scdr(sq))))  ;; 


AXIOM  SUBSEQOEF: 

Vnl  n2  sql  sq2. 


((INTEGER(nl)  A INTEGER(n2)  a SEQUENCE(sq  1 ) a $EQUENCE(sq2)) 
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(SUBSEP(sql,sq2,nl,n2)  * (slen(sq2)=n2-nl *1  A (Vn(n>nl  A n<n2  a 
n sgl  sq2=(n-nl » I ) sgl  sq  1 )))))  , 

Vnl  n2  sql  sq2.  ((INTEGER(nl ) a INTEGER(n2J  a SEQUENCE(sql ) a SEQUENCE(sq2))  a 
(SUBSEP(sq I ,sq2,n I ,n2)  a subseq(sql,nl,n2)*sq2)), 

Vsql  sq2.  ((SEQUENCER! ) a SEQUENCER))  a (SUBS$E(sql,sq2)  « 

3ni  n2.(SUBSEP(sqi ,sq2,nl 

AXIOM  EQSQ: 

Vsql  sq2.  ((SEQUENCE(sqi ) a $EQUENCE(sq2))  a (Vn.(n  tgl  sql»n  sgi  sq2)  a sql»«q2));; 

2.5  Formulas 

AXIOM  FIND: 

Vsq  (FIND(0, LAMBDA, sq)=  SEQUENCE(sq)), 

Vn  s sq.  (FIND(n,s,sq)  - INTEGER(n)  a STRING(s)  a SEQUENCE(sq)  a 

3n  si  s2.(INTEGER(n)  a STRINGfsl ) A S7RING(s2)  A (0<s  a s<slen(sq))  A 
(sl*(n  sgl  sq))  a (ss(s  1 c s2))  A FIND(r.-l ,s2,sq)));; 

AXIOM  FINDTOP: 

Vsq.  (FINDTOP((l,SLAMBDA,sq)-  SEQUENCE  (sq)), 

Vn  s sq.  (FINDTOP(n,s,sq)  s INTEGER(n)  a STRING(s)  a SEQUENCE(sq)  a 

3sl  s2.(STRlNG(sl)  a STRING(s2)  a (si /LAMBDA)  a (s-(sl  c s2))  a 
(s=scar(sq))  a FINDTOP(n-l ,s2,scar(sq))));; 

AXIOM  TERM: 

Vsq.  (TERMSEQ(sq)  - SEQUENCER)  a ((slen(sq)-l  a INDVAR(  1 sgl  sq))  v 

(slcn(-.q)»l  a TERMSEO(r.cdr(sq))  a (INDVAR(scar(cq))  v 
3n  s INTEGER(n)  a STRlNG(s)  a (s=car(scar(sq))  a OPCONST(s)  a n=arity(s)  a 
FIND(n,cdrdcar(r.q)),r.cdr  (sq))))))), 

Vt  (TERM(t)  ■ STRINC(I)  a 3sq  (TERMSEQ(sq)  A l*c*r(sq))):s 

AXIOM  WFF: 

Vf-  (ELF(f)  - STRING(f)  a (f=FALSESYM  v PREDPARO(f)  v 3n  sq  (INTEGER(n)  a 

SEQUENCE(sq)  a PREDPAR(car(«))  a n=arity (car (f ))  a TERMSEQ(sq)  a 
FINOTOP(n,cdr(f),sq)))), 

Vsq.  (FRR(r.q)  r SEQUENCE (sq)  a (sq/SLAMBDA)  a (ELF(scar(sq))  v 

(FRR(scdr(sq))  a 3s I s2.(STRING(sl ) a STRING(s2)  a 
(((scar(sq)-neg(sl ) a FINDO  ,x  I ,scdr(sq)))  v 
(scar(sq)i(s  1 dis  s2)  a FIND(2,(sl  c s2),scdr(sq)))  v 
(scar(r.q)=  (-.  1 con  s2)  A FIND(2,(sl  c s2),scdr(sq)))  v 
(scar(r.q)=(s  1 impl  s2)  a FIND(2,(sl  c s2),scdr(sq)))  v 
(scar(sq)-(r,  1 gen  s2)  a INDVAR(sl)  A FIND(l,s2,scdr(sq)))  v 
(scar(sq)=(s  1 ex  s2)  a INDVAR(sl)  A FIND(I ,s2,scdr(sq))))))))), 

Vf.  (rORM(f)  * STRING(I)  a 3sq.(FRR(sq)  A f-scar (sq)));; 


2.6  Free  and  bound  variables  and  the  substitution 


AXIOM  BOUNDV: 

Vx  n f (GEB(x,n,f)  ? INDVAR  (x)  a INTEGER(n)  a FORM  (I)  a 3s l s2  (I  (STRING(sl  )a 
FORM(fl)  a STRING(s2)  a len(slM<n  A n<(len(()-len(s2))  A 
(x»n  gl  <)A((f=(si  c ((x  gen  (I)  c s2)))  v ((*(sl  c ((x  ex  (1)  c (3))))));; 
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AXIOM  FREEVj 

Vx  n f.  (FRN(x,n,f)  » INDVAR(x)  A INTEGER(n)  a FORM  (»)  a x-(n  gl  f)  A 
-GEH(x,n,f)), 

Vx  f.  (FR(x,f ) * 3n.(INTEGER<n)  a FRN (x,n,f )));; 

AXIOM  FIRSTFF.OF! 

Vx  n f.  (FIRSTFREE(x,n,f)  s FRN(x,n,f)  a Vnl  .(INTEGER(nl)  a x»nl  gl  f n 
(nl>n  v GEB(x,nl ,())))), 

Vx  n f.  (FIRSTFREE(x,n,«)  « firstfre«(x,f)»n);; 

AXIOM  KFREEOCCDFs 

Vx  k n f.  (KTHFREEOCC(x,k,n,f)  ? (INDVAR(x)  A INTEGER(k)  A INTEGER(n)  a 
F0RM(()  a (k=0  a n*ff)  v 

(n=len(f)  a Vn2.((INTEGER(n2)  A n2>kthfr*#oee(x,k-l  ,f))  a -FRN(x,n2,f)))  v 
(FRN(x,n,0  a Vnl.«INTEGER(nl)A(nl<k  a nl  >0))  a 

3n2.(INTEGER(r,2)  A n2<n  A KTHFREEOCC(x,nl  ,n2,f)))))), 

Vx  k n f.  (KTHFREEOCC(x,k,n,f)  • kthfreeoee(x,k,f)»n), 

Vx  k n f.  (KTHFREEOCC(x,k,n,f)  a numbfreeoce(x,n,f)*k), 

Vx  k n f.  (numbfr«*oce(x,n,f)*k  a (KTHFREEOCC(x,k,n,f)  v 

(n<kthfrMOce(x,k,f)  a n>kthfr«®occ(x,k-l, ()))•; 

AXIOM  SUBSTDF: 

Vx  t f I 12.  (SBT(x,t,f  1 ,f 2 ) * ((INDVAR(x)  A TERM(t)  a F0RM«l ) a FORM(f2))  a 
Vnl  n2.((INTEGER(nl ) a INTEGER(n2)  a 
n2*numbfrooocc(x,nl  ,f  1 )*(lon(t)-l  ))*nl  a 
(HNDVARfnl  gl  fl)  a nl  gl  fl  - n2  gl  f2)  a 
(INDVARfnl  gl  fl)  a «FRN(x  nl.fl)  a SUBT(t,f 2,n2 » a 
(-F RN(x,n  1 ,f  1 ) a INVARTfnl  rf  1 ,n2,f 2)))))))), 

VI  f2  n2.  (SUBT(t,f2,n2)  ? (TERM(t)  a FORM(f2)  a INTEGER(n2)  a 
Vx2  k.((INDVAR(x2)  a INTEGER(k)  a ((k  gl  t)rX2))  a 
FRN(x2,n2*(len(t)-k),f2)))), 

Vnl  fl  n2  f2.(INVART(nl  ,fl  ,n2,f2)  « (INTCGER(n) ) a FORM(fl)  a INTEGER(n2)  a 
FORM(f2)  a (GEB(n2  gl  f2,n2,»2)  * GEB(nl  gl  fl.nl, fl))  a 
(FRN(n2  gl  (2,n2,f2)  * FRN(nl  gl  fl.nl.fl ))  a 
n2  gl  (2«nl  gl  fl)), 

Vx  I fl  f2.  ((INDVAR(x)  a TERM(t)  a FORMff  I ) A FORM(f2))  a 
(SBT(x,t,fi,f2)-sbt(x,t,fl)sf2)), 

Vx  t fl.  ((INOVAR(x)  a TERM(t)  a FORM(fl))  a FORM(sbt(x,t,fl)));j 

AXIOM  SUBOEF: 

Vxl  x2  fl  f2.(SBV(xl ,x2,f  I ,f2)  « (0NDVAR(xl ) A INDVAR(x2)  A F0RM(f  1 ) A FORM(f2))  a 
Vn.(INTEGER(n)  a (HNDVARfn  gl  f I ) a n gl  Mm  gl  f2)  A 
(INDVARfn  gl  fl)  a ((FRN(xl ,n,f I ) a FRN(x2,n,f 2 ))  A 
(-FRN(x I ,n,f ) ) a INVARV(n,f  I ,f2)))))))), 

Vn  f I f2  (INVARVfn.f I ,f2)  s (INTEGER(n)  a FORMffl ) a F0RM«2)  a 
(GEB(n  gl  f2,n,f 2)  r GEB(n  gl  fl,n,fl))  A 
FRN(n  gl  2,n,f2)  » FRN(n  gl  fl,n,fl))  A 
n gl  f2=n  gl  fl)), 

Vxl  x2  fl  f2  .((INDVARfx I ) a INDVAR(x2)  a FORMlfl)  a F0RM(f2))  a 
(SBV(xl  ,x2,f I ,f2)  a sbv(xl  ,x2,f  I )*»2)), 

Vxl  x2  fl.  ((INDVAR(xi)  a INDVAR(x2)  a FORM(fl))  a FORM(sbv(xl  ,x2,»l )));; 


2.7  Rules  of  inference 
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AXIOM  aNDIRUL; 

Vsq  pfl  pf 2 


Vsq  pf. 


AXIOM  FALSERUL  : 

Vsq  pfl  pf 2. 


Vsq  pf. 


AXIOM  1MPLRUL  : 

Vsq  pfl  pf 2. 


Vsq  pf  fl. 
Vsq  pf. 

AXIOM  NEGRUL: 

Vsq  pf  f 1 . 


Vsq  pf. 
Vsq  pf  f 1 . 


Vsq  pf 

AXIOM  ORR'JL: 

Vsq  pf. 


(ANDI(sq,pfl,pf2)  s (SEQUENCE(sq)  a PROOFTREElpf  1 ) a PR00FTREE(p<2)  A 
3f I f2.($cdr(sq)-(pf  I cc  pf2)  a sc»r(sq)=fl  con  <2  a FORM«l ) A 
FORM«2)  a fl=scar(pfl)  a <2*scar(pf2))}), 

(ANDE(sq.pf)  ‘ (SEQUENCE (cq)  a PROOFTREE(pf)  a 3fl  (scdr(sq)«pf  a 
FORM(fl)  a (((scar(sq)  con  f 1 )*scar(pf))  v 
(«1  con  (scar  (sq))=scar(pf )))));; 


(FALSEKcq.pfl  ,pf 2)  * (SEQUENCE(sq)  a PROOFTREE (pf  1 ) a PRO0FTREE(pf2)  A 
3f  I ((scdr(sq)i(pf  1 cc  pf2))  a (scar(sq)*FALSE$YM)  A FORM(fl)  A 
(neg(x)--scar(pfl ))  a (xl  «scar(pf2))))), 

(FALSEE(sq,pf)  s (SEQUENCE(sq)  a PROOFTREE(pf)  a (scar(pf).FALSESYM)  A 
scdr(sq)=pf));; 


(lMPLE(sq,pf  1 ,pf2)  • (SEQUENCE(sq)  a PROOFTREE(pfl ) a 

PROOFTREE(pf2)  a Vfl.((scdr(sq)*(pfl  cc  pf2))  a FORM(fl)  a 
(scar (pf  1 )=  (f  1 impl  (scar(sq)))  A (scar (pf 2 )=f  1 )))), 

(IMPLID(sq,pf  f 1 ) - (SEQUENCE(sq)  a PROOFTREE(pf)  a scdr(so)*pf  a 

FORM(fl ) a 3f2  ((scar(sq)*(f  1 impl  x2))  a FORM(f  1 ) a «2»scar(pf))  A 
3n  (INTEGER(n)  a fi=>(n  sgl  pf))))));; 

(IMPLI(sq.pf)  ’ 3flMPUD(sq,pf,f));; 


(NOTID(sq.pf.f  I ) * (scdr(r,q)=pf  a SEQUENCE(sq)  a PROOFTREE(pf ) A 
FORM(fl)  a 3n  ((scar(pf)sFALSESYM)  a scar(5q)*neg(f  1 ) a 
INTEGER(n)  a ((n  sgl  pf)=f  1 )>)). 

(NOTKsq.pf)  * 3f.NOTID(sq,pf,f)), 

(NOTED(sq.pf,f  1 ) « (scdr(sq)-pf  a SEQUENCE(sq)  a PROOFTREE(pf)  A 
FORM(f)  a 3n.((scar(pf)=FALSESYM)  a INTEGER(n)  A 
l(n  sgl  pf)=mg(scar(sq)))))), 

(NOTE(sq.pf)  * 3f.N0TED(sq,pf,<));; 


(ORKr.q.pf)  * (scdr (sq)=pf  a SEQUENCE(sq)  A PROOFTREE(pf)  a 

3f  1 f2.((scar(-.q)  * (fl  dis  f2))  a FORM(fl)  a FORM«2)  a (fl  «scar(pf))  v 
(f  2=scar(pf))))>, 

Vsq  pfl  pf 2 p<3  f.  12  (ORED(sq,pf  1 ,pf2lPf3,f  1 ,f2)  e (SEQUENCE(sq)  a PROOFTREE(pf  1 ) A 
PROOFTREElpf 2)  a PROOFTREElpf3)  a FORM(fl)  a FORM«2)  a 
(scdr (sq)=(pf  1 cc  (pf 2 cc  pf3))  a 

(scar (pf  1 )-(f  1 dis  (2))A(scar(pf2)=scar(sq))  a (scar(pf3)=scar(sq))  a 
3nl  (nl  sgl  pf 2>=f  I ) a 3nl.(nl  sgl  pf3)=f 2)))), 

Vsq  pfl  pf 2 pf3  (ORE (sq,pf I ,pf 2,pf3 ) a 3fl  f2.0RED(sq,pf  1 ,pf2,pf3,fl  ,f2));; 


AXIOM  EXRUL  ; 

Vsq  pf  x t 


(EXI(sq,pf,x,f) 3 (SEQUENCE(sq)  a PROOFTREElpf)  a INDVAR(x)  a TERM(l)  a 
311  ((scdr(sq)=pf  I ) a (scar(sq)=(x  ex  f 1 ))  a FORM(f  1 ) a 
scar(pf)-sbf(x,l,f  I )))), 

Vsq  pfl  pf 2 xl  x2  fl.  (EXED(r.q,pfl,pf2Ixl,x2Ifl ) * (SEQUENCE(sq)  a PROOFTREElpf  1 ) a 
INOVAR(xl ) a INDVAR(x2)  A (scdr(sqMpf  1 cc  pf2))  A FORM(f  1 ) A 
(scar (pf  1 )=(x  1 ex  fl))  a (scar(sq)=  scar(pf2))  a 
3n.((n  sgl  pf2)=sbt(x I tx2,f I ) a INTEuER(n)  a EXAPPL(x2,p<2,fl ))))), 

Vsq  pfl  pf 2 xl  x2  (EXE (sq.pf  1 ,pf2,x!  ,x2)  r EXEO(sq,pf  1 ,<c  1 ,x2)), 

Vx  pf  f.  (EX APPL(x,pf,f) « (INOVAR(x)  a PROOFTREF(pf)  A FORM(f)  a -FR(x,scar(p<))  A 
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AXIOM  GENRUL: 

Vsq  sql  x t 


Vsq  sql  xl  x2. 


Vx  sq. 
Vsq. 


28  Deduction 

AXIOM  PROOF: 
Vsq. 


AXIOM  DEPNOG: 
Vsq  f 
Vsq  f 

AXIOM  DEPEND: 

Vpf  pfl  f. 


AXIOM  DEP: 

Vpf  pfl  pf2  f. 


AXIOM  DEPND: 

Vpf  pfl  p<2  pf 3 f. 


-FRM  a VfMDEPENDipf.fi ) a -FRfx.fl ))));; 


■ latyutNUUsq)  a INDVAR(x)  a TERMft 
PROOFTREE(sql ) a 3f  (FORM(f)  a scarfsql  )=x  gen  f a 
scar(r:q)=sb1(x,M)))), 

( GE Nl (r.qr.ql ,xl,x2)  - (SEQUENCE(sq)  a INDVAR(xl)  a INDVAR(x2)  a 
scdr(sq)=sql  a PROOFTREEisql ) a 3f.(FORM«)  a (se.r(sq).xl  e.n  f)  a 
scar (nql  )=sbl(x I ,x2,f)  a APGENI(x2,sql ))))  ^ **"  11  * 

(APGENKx.sq)  r (INDVAR(x)  a Vf,(DEPEND(sq.f)  a -FR(x  f)))  a 
PROOFTREE(sq)),  ' 

(PROOFTREE(sq)  a 3x.(INDVAR(x)  A APGENl(x.sq)))  ;; 


(PROOFTREE(sq) ; ((SEQUENCER)  a FORM(sq))  v 

3PNn^?°FTnEEwATr/(0RI(Sq,p,>  V ANDE^q.pf)  v FALSEE(sq.pf)  v 
NOTl(sq.pf)  v NOTE(sq.pf)  v IMPLI(sq.pf)))  v 

3pf  x 1 .(PROOFTREE(pf)  a INDVAR(x)  a TERM(t)  a 

_ v GENEisq.pf.x.f)  v EXI  (sq.pf.x.l )))  v 

3pfl  pf2.(PROOFTREE(pf|)  a PROOFTREE(pf2)  a 
(ANpiisq.pfl.pf2)  v FALSEI(sq,pfl  ,pf2)  v IMPLEfsq.pf  I ,pf 2 )))  v 

A indvar<“’  ■ » 

A PR00FTI,EEI’>,2>  * pbooftreeipO)  a 


sucrcxursq.i;  a (StyUENCEisq)  „ , „ 0UD3 

((SEQUENCE(sq)  a FORM(f)  a sq=f)  a DEPEND(sq.f)) 


I m 


(((PROOFTREE(pf)  a PROOFTREEipf  I ) a (pfl «scdr(pf)))  a 
(DEPEND(pf.f)  s DEPENDipf I ,f)))  e * 

(ORI(pf.pfl)  v ANDE(pf,pfl ) v FALSEE(pf.pfl)  v 
3fl  (FORMifl ) a (NOTID(pf,pf|,f| ) v NOTEDipf.pfl ,f  | ) v 
IMPLID(pf,pfl,f|))  a fl/f)  v ’ 

3x  \ (INDVAR(x)  a TERM(t)  a GENlipf.pfl  ,x,f)  v 
GENE(pf,pf I ,x,t)  v EXI(pf,pf|  ,x,f)))))  •• 


(((PROOFTREE(pf)  a PROOFTREEipf  I ) a PROOFTREE(pf2)  A 

((pfl  cc  pf  2=,:cdr  (pf ))  v (pf  2 cc  pf  I =scdr(pf ))))  a (DEPENDfof  f) 
(DEPEND(pfl.f)  v DEPEND(pf2,f))»  . (ANDKpfJpf I ,pf2)  v 
FALSEKpf.pf I ,pf2)  v IMPLE(pf  pfl,pf2)  v 
3x1  x2  fl  (EXED(pf,pfl  ,pf2,xl  ,x2,fl ) A f/f | )));• 


(((PROOFTREE(pf)  a PROOFTREE(pfl ) a 
PROOFTREE(pf2)  a PROOFTREE(pf3)  A 
(((pfl  cc  (pf 2 cc  pf3))=scdr(pf ))  v 
((pfl  cc  (pf 3 cc  pf2))=scdr(p<))  v 
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> 


((pf 2 cc  (pfl  cc  pf3))=scdr(pl))  v 
((pf 2 cc  (pf3  cc  pfl  ))=scdr (pf ))  v 
((pf3  cc  (pfl  cc  pf2 ))=scdr (pf ))  v 
((pf 3 cc  (pf 2 cc  pfl  ))=scdr (pf ))))  3 

(DEPEND(pf.f)  f (DEPEND(pfl.f)  v DEPEND(pf2,f)  v DEPEND(pf3,f ))))  ■ 
311  <2.(0RED(pf,pf  1 ,pf2lpf3,f  1 ,12)  A f/fl  A f/f2))  , 

AXIOM  NDEPNO: 

Vpf  1 pf 2 f ((NOT!D(pfl  ,pf 2,f ) v NOTED(pf  1 ,pf2,f)  v IMPLIDIpfl  ,p(2,1))  » 

«DEPEND(pfl,f)), 

Vpfl  pf 2 pf3  xl  x2  f (EXED(pfl  ,pf2,pf3,xl  ,x2,f)  a ■«  DEPENC(pll ,0)  , 


Vpfl  pf 2 

pf 3 pf 4 fl  12.  (ORED(pfl ,p<2,pf3,pf4,f  1 ,12)  a - DEPEND(pfl ,f  1 ) A -DEPEND(pfl  ,12));; 

AXIOM  PROVABLE: 

Vf. 

(BEW(f)  t FORM(f)  A 3sq.(PR00FTREE(iq)  a fneir(tq)  A 

Vfl  (DEPEND(sq,f  1 ) » AXIOM(fl ))));; 

AXIOM  THEORY: 

Vx  1 

(AXIOM(f)  a - FR(x,l)AFORM(f));; 

AXIOM  INFVAR- 

Vs.3x  Vn 

n f\  s/x)  ;} 

. 
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APPENDIX  3 

THE  PROOF  OF  "IF  f IS  A WFF  ALSO  . x.f  IS  A WFF" 


3.1  FOL  commands  and  printout  In  the  many  sorted  logic 
commands 

VE  WFF  I,  x Ren  t; 

TAUTEQ  (x  R«n  t«  x gen  0 v (x  gen  I • x ex  0; 

UNIFY  — :*2*2«I  , 

TAUT  — :•  1 , l:*j 

proof 

1 F0RM(x  gen  l)MELF(x  gen  l)v(3xl  II  ((x  gan  0=»(kI  gen  II )v(x  gen  1)>(xl  »xtl))v 
(3f l 12. ((x  pen  l)*(ll  dis  I2)v((x  gen  l)=(ll  con  <2)v(x  gen  «)•(»!  impl  «2)))v 

311. (x  gen  f)=neg(ll )))) 

2 (x  gen  l)*(x  gen  ()v(x  gen  l)=(x  ex  I) 

3 3x1  1 1 ( ( x gen  »)*(xl  gen  tl)v(x  gen  l)=(xl  ex  tl)) 

4 F0RM(x  gen  t) 


3.2  FOL  commands  in  the  earlier  axiomatiiation 

DECLARE  INDVAR  A U; 
label  hptl; 

ASSUME  FORM(I)  a INDVAR  (xl)  ; 

label  teol  ; ..... 

ASSUME  VI  t (SEQUENCE(sq)A  sq  / SLAMBDA  a (STRING(s)a  (l  cc  iq)  /»  SLAMBDA)); 

label  teo2  ; 

ASSUME  Vs  sq.(STRING(s)ASEQUENCE(sq)5  ccsr(t  :c  sq)»  0; 
label  teo3  ; 

ASSUME  V«  sq  (STRING(s)ASEQUENCE(sq)«  icdr(s  cc  sq)»  sq); 
label  teo4  ; 

ASSUME  Vsq.(SEQUENCE(sq)Asqjt SLAMBDA  * lind(l  ,scar(sq),sq)); 
label  teo5  ; 

ASSUME  VI  x 'FORMO)aINDVAR(x)  =STRING(x  gen  0); 
label  teo6; 

ASSUME  Vs  sq  (STRING(s)ASEQUENCE(sq)  a$EQUENCE(s  cc  sq)); 
label  teo7  ; 

ASSUME  Vx.ONDVAR(x)  a STRING(x)); 

Ve  WFF2  » ; 

LABEL  ass  I ; 

taut  3sq  (FRR(sq)Af=scer(sq))  I:-; 

ASSUME  FRR(SQ)  a I • SCAR(SO)  ; 

VeWFFl  SO; 

Ve  teol  SQ  ,xl  Ren  I; 
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V«  t«o2  *1  g«n  f ,SQ; 

V#  feo3  xl  g*n  f ,SQ; 

V»  teo4  SO; 

V«  f«c5  f ,xl ; 

V«  leo7  xl ; 

V.  W«l  (xl  g«n  f)  cc  SO; 

TAUTEO  -:*2*2*2*2*2* I ■ I [si  *-f  : s2«-xl]  !:-• 
unify  --:»2*2»2»2*2 
V«  teo6  xl  gen  < ,S0; 

V«  WFE2  xl  gen  f ; 

tauteq  -:*2"2* I [sq*-(*l  gen  f)  cc  SO]  Is*; 

unify  — :«2«2 

taut  FORM(xl  gen  <)  1 

3e  ass  I,-, SO; 
ai  hptl 
*1  -,xl,«; 


3.3  Printout  of  dip  proof  in  tin-  rarlirr  axiouiatiration 

1 FORM(QaINDVAR(xI)  (I)  — ASSUME 

2 Vsq  s ( (SEQUENCE  (sq)Asq/SL  AMO  DA  )3(STRING(s)3(s  cc  sq)/SLAMBDA))  (2)  — ASSUME 

3 Vs  sq  ((STRING(s)ASEQUENCE(sq))  scar(s  cc  sq)=s)  (3)  — ASSUME 

4 Vs  sq  ((STRlNG(s)ASEOUENCE(rq))  rcdr(s  cc  sq)rsq)  (4)  — ASSUME 

5 Vsq  ((SEQUENCE (sq'^'q/SLAMGD A)  find(l ,scar(sq),sq))  (5)  — ASSUME 

6 VI  x.((FORM(f )aINDVAR(x))=>STRING(x  gen  f))  (6)  — ASSUME 

7 Vs  sq  ((STRING(s)ASEQUENCE(sq))=SEQUENCE(s  cc  sq))  (7)  — ASSUME 

8 Vx.(lNDVAH(x)=STRING(x))  (8)  — ASSUME 

9 F0RM(IMSTRlNG(f)A3sq  (FRF  Af«scar(sq)))  — VE  WFF2  f 

10  3sq  (FRR(sq)Af=scar(sq))  (|  2 3 4 5 6 7 8)  — TAUT  1:9 

I I FRR(S0)Af=r.car(S0)  (II)  — ASSUME 

I 2 FRR(SO)  (SEOUENCE(SO)A(SO/SLAMBDAA(ELF(-.car{SO))v{FRR(scdr(SO))A3s| 
s2  (STRING!', I ) a (STRING(* 2 ) a( (-c a- (SQ)-NEG(5 1 )Afmd(l  ,sl  ,scdr(SQ)))v((scariSQI 
»(sl  dis  r,2)Afind(?,'.l  c x2,'.cdr(S0)))v(('.car(S0)=(sl  ccn  s2)Afind(2,sl  c s2, 
scdr(S0))5v(hcar(S0)--('.l  impl  '.2)Afmd(2,sl  c s2,',cdr(SQ)))v((scar(SQHs I ft” 
s2)a(INDVAR(sI  )Afind(lls2,'.rdr(SO))))v(',car(SO)=(sl  ex  s2)a(INDVAR(sI  )Afind,J 
;2,scdr(S0)))))))))))))))  — VE  WFFI  SO 

13  (SEQUENCE(SQ)/\SQ/SlAMBDA)3(STRING(xl  gan  f)=>((x | gen  f)  cc  SQ)/SLAMBDA)  (2) 
— VE  2 SQ.xl  gen  f 
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1 4 (STRINGUI  gen  f ) aSEQUENCE (SQ) )-scar((x  1 gen  <)  cc  SQMxl  gen  I) 

(3)  — VE  3 xl  gen  f,SQ 

15  (STRING(xl  gen  l)ASEQUENCE(SQ)Hcdr((rI  gen  0 ce  SQ)*SQ  )4)  — VE  4 xl  gen  l,$Q 

16  (SEQUENCE  (SO)aSQ/SL  AMBDA) -lindd, sc  ar($Q),SQ)  (5)  ...  VE  5 $q 

17  (FORM(I)aINDVAR(xI ))sslring(xl  gen  I)  (6)  — VE  6 f,xl 

18  INDVAR(xl  )=S7RING(xl)  (8)  — VE  8 xl 

19  FRR((x  1 gen  I)  cc  SQ)  (SEQUENCE (( x I gen  ♦)  cc  SQ)a(((xI  gen  I)  cc  U)f< 

SLAMBDAA(ELF(scar((xl  gen  1)  cc  SQ))v(FRR(;cdr((xl  gen  I)  cc  SQ))a 
3sl  s2.(STRING(sI)a(STRING('-. 2)A((r,cjir((«;l  gen  (}  cc  SQ)*NEG(sI)a 
(ind(  1 ,s  1 ,scdr((x  1 gen  f)  cc  SQ))M(-.car((xl  gon  ()  cc  SQ)=(s  1 dis  s2)a 

find(2,s  1 c s2,scdr((xl  gen  I)  cc  SQ)))v((«:car((xl  gen  f)  cc  SQMsl  con  s2)a 

(ind(2,s  1 c s2,scdr((xl  gen  ()  cc  SQ)))v((scar((xl  gen  f)  cc  SQMsl  impl  s2)a 

(md(2,sl  c s2,scdr((xl  gen  I)  cc  $Q))M(«ar((xl  gen  I)  cc  SQMsl  gen  s2)a(1NDVAR(s1  )a 

lindd  ,s2,scdr((xl  gon  f)  cc  SQ))))v(«-.car((xl  gon  ()  cc  SQMsl  ex  s2)a(1NDVAR(s1  )a 
Iind(l,s2,scdr((xl  gen  f)  a SQ)))))))))))))))  — VE  WFF1  (xl  gen  I)  cc  SQ 

20  STRING(xl)A(STRING(»)A((scar((xl  gen  «)  cc  SQ)=NEG(xI)a 

lindd, xl  ,ccdr((xl  gon  I)  cc  SQ))M('.car((xl  gen  I)  cc  SQMxl  dis  I)a 

find(2,x  1 c f,scdr((xl  gon  I)  cc  SQ)))v((scar((xl  gen  I)  cc  SQMxl  con  !)a 

find (2.x  1 c f,scdr((x  1 gon  I)  cc  SQ)))v((scar((x  1 gon  f)  cc  SQMxl  impl  I)a 

lind(2,x  1 c f,scdr((x!  gen  I)  cc  SQ)))v((scar((xl  gen  I)  cc  SQMxl  gen  I)a(INDVAR(x1  )a 

lindd ,f,scdr((xl  gon  I)  cc  SO) ) ) ) v (-.car ( (x I gen  I)  cc  SQMxl  ex  I)a(INDVAR(x1  )a 

(ind(l ,(,scdr((x I gen  I)  cc  SQ))))))))))  (1  2 3 4 5 6 7 8 II)  — TAUTEQ  1:19 

21  3s  1 s2.(STRING(s!WSTRING(s2)A((scar((sl  gon  I)  cc  SQ)=NEG(sI)a 

lindd  ,s  I ,scdr((x  I g.*r  i)  cc  SQ)))v((ncar((xl  gen  I)  cc  SQMsl  dis  s2)a 
(ind(2,s  1 c s2,scdr((xl  gon  I)  cc  SQ)))v((scar((xl  gon  I)  cc  SQMsl  con  s2)a 
!ind(2,sl  c s2,scdr((x|  gen  I)  cc  5Q)))v((r.cer((xl  gen  I)  cc  SQMsl  impl  s2)a 

lind(2,sl  c s2,scdr((xl  gen  I)  cc  SQ)))v((scar((xl  gen  I)  cc  SQMsl  gen  s2)a(INDVAR(s1  )/\ 

find( I ,s2,scdr((x  1 gen  I)  cc  SQ))))v(scar((xl  gon  I)  cc  SQMsl  ex  s2)a(INDVAR(s1  )a 
lindd ,s2,scdr((xl  gen  I)  cc  SQ)))))))))))))))  (1  2 3 4 5 6 7 8 1 1)  — UNIFY  20 

22  (STRINGS  1 gen  I)a$EQUENCE(SQ))=SEQUENCE<(x I gen  I)  cc  SQ)  (7)  — VE  7 xl  GEN  f.SQ 

23  F0RM(xl  gen  ()s(STRING(x I gen  l)A3sq  (FRR(sq)A(xl  gen  l)*scar(sq)))  — VE  WFF2  xl  gen  f 

24  FRR((x I gen  I)  cc  SQ)a(xI  gon  !)=-.car((x I gon  I)  cc  SQ)  (I  2 3 4 5 6 7 8 11)  TAUTEQ  1:23 

25  3sq  (FRR(sq)A(xl  gon  l)-scar(sq))  (1  2 3 4 5 6 7 8 II)-—  UNIFY  24 

26  F0RM(x I gen  I)  (I  2 3 4 5 6 7 8 II)  — TAUT  1:25 

27  F0RM(xl  gen  I)  (I  2 3 4 5 6 7 8)  — 3E  10  26  U 

28  (F0RM(()aINDVAR(xI))=F0RW(x1  gen  I)  (2  3 4 5 6 7 8)  — =1  1 27 

29  VI  xl  ((FORM(I)aINDVAR(xI  ))=FQRM(xl  gen  ())  (2  3 4 5 6 7 8)  — VI  28  xl«-xl  1-1 
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APPENDIX  4 

THE  PROOF  OF  THE  EQUIVALENCE  BETWEEN  SBV  AND  SBT  FOR  VARIABLES 


4.1  FOL  commands  in  the  many  sorted  logic 

LABEL  ARITH1;  ASSUME  Vn  x (n*(len(x)-l  )»0); 

LABEL  ARITH2;  ASSUME  Vn.  (Om=n); 

LABEL  ARITH3;  ASSUME  Vx.  (lon(x)-l  )=0; 

LABEL  ARITH4;  ASSUME  Vn,  (n-0)«n; 

LABEL  STRING1 ; ASSUME  Vx  I t\  x . x; 

Proof  of  the  First  Lemma  Vx  f n (SUBT(x,f,n)  a FRN(x,n,0> 

LABEL  HPTLEM;  ASSUME  SUBT(x,f,n); 

V*  SUBSTDFl,x,f,n; 

TAUT 
V«  -,x,l; 

V®  STRING  I ,x;  tubstr  - in  — ; 

V#  ARITH3  ,x;  substr  - in 
V®  ARITH4  ,n;  tubstr  - in 
TAUTEQ  FRNtx.n.f ), HPTLEM*  I i-s 
=>l  HPTLEM,-; 

LABEL  LEMMA  1 ;VI  -,xft(n; 

Proof  of  the  Second  Lemma  Vn  fl  f2.(INVART{n,fl,n,f2)  ■ INVARVfn.fi ,f2)) 

V®  SUB3TDF21n1«l1n1«2; 

V®  SUBDEF1  ,n,<  1 ,12; 

TAUT  — :»1  s > 

LABEL  LEMMA2;  Vi  -1n1«l,«2; 

Proof  of  the  Main  Theorem  Vxl  x2  fl  f2.(SBT(xl,x2,«l,<2)=SBV(xl(x2,fl,f2)) 

LABEL  HPT;  ASSUME  SBTfxl  ,x2,f  I ,<2); 

V®  SUBSTDFO.x  I ,x2,f  I ,<2; 

TAUT  -:*2,HPT,-; 

VE  nl.nl; 

V®  ARITHl.numbfroooccfxl ,nl,fl ),x2;  substr  - in  — 

V®  ARITH2.nl; 

Ve  SUBOEFO  xl,x2lfl,«2; 

V®  LEMMAI.x2.f2.nl; 

Vo  LEMMA2.nl  ,f  I ,f2; 

TAUTEQ  — :*2»l[n»-nlJ,HPT«l:-; 

Vi  -,nl*-n; 

TAUTEQ :■!  ,HPT*1 ; 

at  HPT,-; 

VI  -,xl,x2,fl,f2; 


4.2  Printout  of  the  proof  in  the  many  sorted  logic 
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1 Vn  x (n*(l*n(x)-l  ))=0  (1) 

2 Vn.(0«n)=n  (2) 

3 Vx.(l«n(x)-1  )»0  (3) 

4 Vn,(n-0)*n  (4) 

5 Vx.(l  elx)*x  <5) 

6 SUBT (x,f ,n>  (6) 

7 SUBT(x,f,n)*Vx2  k ((K  gl  x)*x2=FRN<x2,n-(l«n<x)-k),f)) 

8 Vx2  k ((k  rI  x)=x2=>FRN(x2,n-(len(x)-k),f»  (6) 

9 (I  rI  x).x=FRN(x,n-(l«n(x)-l),f)  (6) 

10  (1  gl  *)**  (5) 

11  x.x3FRN(x,n-(l«n(x)-l),l)  (5  6) 

12  (l«n(x)-l  )»0  (3) 

13  x«x=FRN(x,n-0,f)  (3  5 6) 

14  (n-0)=n  (4) 

15  x«x=FRN(x,n,f)  (3  4 5 6) 

16  FRN(x,n,l)  (3  4 5 6) 

17  SUBKx.l.nJsFRkKx.n.O  (3  4 5) 

18  Vx  I n (SUBT(x,f,rt)3FRN(x,n,f))  (3  4 5) 

19  INVART(n,U  ,n,12H(GEB(n  rI  f2,n,f2)=GEB(n  gl  U,n,U  »A((FRN(n  e>  f2,n,f2)» 
FRN(n  Rl  H,n,U))A(n  rI  12Mn  gl  (1))) 

20  INVARV(n,fl,f2)-((GEB(n  p.l  f2,n,f2)  GEB(n  gl  1 1 tn,f l ))A((FRN(n  gl  f2,n,f2)= 
FRN(n  gl  U,n,fl))A(n  rI  f2)=(n  gl  11))) 

21  INVART(n,ll  ,n,12)'INVARV(n,ll,12) 

22  Vn  11  12  (INVART (n,f  1 ,n,12 )~lNVARV(n,f  1 ,12)) 

23  SBT(xI,x2,f  1,12)  (23) 

24  SBT(xl  ,x2,f  1 ,12)“Vn  1 n2  (n2=((numbfroeocc(x I ,nl  ,1 1 )*(lert(x2)-l  ))*nl  )a 
((-INDV  AR(n  1 gl  f 1 )=>(nl  gUl)*(n2  gH2))A(INDVAR(nl  gill  )a((FRN(xl,nl  ,(1  )a 
SUBT(x2,l2,n2))A(-FRN(xl  ,nl  ,1 1 )alNVAf<T(nl ,fl,n2,12)))))) 
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25  Vnl  f'2.(n2.((numb«roeocc(xllnl,<l)*(len{x2)-]))*nl)3(HNDVAR(ni  cl  »|)3 

jn*  f' #1),(n2  6'  <2))A(INDVAR(nl  gl  <1  )=»((FRN(xl  ,nl  ,f I )a$UBT(x2,»2,n2))A 
(-FRN(x  1 ,nl  ,f  I )=lNVART(nl  ,<  I ,n2,l2))))))  (23) 

26  nl.((numbfre«occ(xl,nl,iI)*(len(x2)-i)).n])3(HNDVAR(nl  cl  f 1 )=><nl  clfl). 

1 1 

27  (numbfr»«occ(xl,nl,fl)*(l«n(x2)-l))s0  (I) 

2*  <<nj'(®*"1)3((',NDVAR(n*  RHi)={nl  gl(l)«(nl  gl  f2))A(INDVAR(nl  Kl  f ] )=> 
((FRN(xl  ,nl,f  1 )aSUBT(x2,!2,nl  ))A(->FRN(xl,nl  ,11  )a|NVART(nl ,<l ,nl,f2)))))  (]  23) 

29  (0*nl  )=nl  (2) 

30  SB V(x  1 tx2,f I ,f 2 ) Vn  {{-INDVAR(n  gl  i|  )=(n  gl  II  )=(n  gl  l2))A(INDVAR(n  el  II  )s 

((FRN(xI  ,n,f  I )3FRN(x2,n,l2))A(-FRN(xl  ,n,fl  )=INVARV(n,f  1 ,12)))))  8 

31  SUBT(x2,f2,nl  )aFRN(x2,nl  ,12)  (3  4 5) 

32  INVART(nl,ll,nI,l2)INVARV(nl,fl,l2) 

33  (-INDVAR(nl  gHl)a(nl  glflMnl  glf2))A(INDVAR(nl  gl  11  )a((FRN(xl  ,nl  (I  )a 
FRN(x2,nl,f2))A(-FRN(xl,nl,fl)3lNVARV(nl,fl,f2))))  (12  3 4 5 23) 

34  Vir(HNDVAR(n  gl  fl)a(n  gl  fl)--(n  gl  <2))A(INDVAR(n  gl  »1  )a((FRN(xl  ,n.f  1 )o 
FRN(x2,n,f2))A(-FRN(x  1 ,n,f  1 )=INVARV(n,f  I ,12)))))  (12  3 4 5 23) 

35  SBV (xl ,x2,f 1 ,12)  (1  2 3 4 5 23) 

36  SBT(xl  ,x2,f  1 ,f2)=»SBV(x  1 tx2,f  1 ,12)  (1  2 3 4 5) 

37  Vxl  x2  fl  f2.(SBT(x  1 tx2,f  1 ,f 2)=SBV(x  1 ,x2,f  1 ,f 2))  (12  3 4 5) 


4.3  FOL  commands  in  the  earlier  ax  initialization 


LABEL  ARITHlj 
LA8EL  ARITH2; 
LABEL  ARITH3; 
LABEL  ARITH4; 
LABEL  STRING! 


ASSUME  Vn  x.((INTEGER(n)  a INDVAR(x)):>(n*(l«n(xM  )*0))» 
ASSUME  Vn.  (INTEGER(n)  a (0*n=n)); 

ASSUME  Vx  (INDVAR(x)  a ((lon(x)-l  )=0)); 

ASSUME  Vn.  (INTEGER(n)  a (n-0)=n); 

ASSUME  Vx.  (INDVAR(x)  a I gl  x=x); 


Proof  of  the  First  Lemma 

Vx  n f.((INDVAR(x)  a INTEGER(n)  a FORM(f)  a SUBT(x,»,n))  a FRN(x,n,f)) 

LABEL  HPTLEM;  ASSUME  INDVAR(x)AFORM(()AlNTEGER(n)ASUBT(x,f,n)- 
LABEL  FACT  ; ASSUME  INTEGER(I); 

V#  SUBST0Fl,x,f,n; 

TAUT  -:"2«2»2 •2,— 

V#  -,x.I; 

V*  STRING  1 ,x;  TAUT  -:«2,HPTLEM:-;subt;»r  • in  — • 

V#  ARITH3,x;  TAUT  -:«2,HPTLEM:-;sub5tr  - in  — • 
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V«  ARITH4,n;  TAUT  -:»2,HPTLEM:-;suljslr  - m — ; 

TAUTEQ  FRN<x,n,f),HPTLEM:-; 

=>l  HPTLtM,-; 

LABEL  LEMMA J ;V!  -,x,l,n; 

Proof  «f  the  Second  lemma  Vk  fl  f 2.{INVART(k,f  1 ,k,f2)  • INVARV(k,fl,f2)) 

V«  SUBSTDF2,k  f 1 ,k,f 2; 

V«  SUBDEFI  ,k,f  1 ,f 2; 

TAUT  — s«l  * 

LABEL  LEMMA2;  Vi  -,k,f  1 ,f2; 

Proof  of  the  Main  Fli'minn 

Vxl  x2  <1  f2  ((INDVAR(xl)  a INDVAR(x2)  a FORM(fl)  a FORMff 2 ) a SBT(xl,x2,»l  12)' 
SBV{x  | ,x2,f  I ,f  2 )) 

LABEL  HPT;  ASSUME  INDVAR(xl  )AlNDVAR(x2)AF0RW(fl  )AF0RM(f2)ASBT(xl  ,x2,f  I ,f2); 

LABEL  THTERM;  ASSUME  Vx2.(INDVAR(x*p  lERM(x2)); 

VE  THTERM, x2; 

LABEl  THNFRO;  ASSUME  Vxl  nl  fl  INTEGER(mjmbfreeocc(xl,nl,fl )); 

V«  SUBSTDF0.xl.x2.fi  .f2; 

TAUT  -:*2»2«2«2*2,HPT:-; 

VE  -,nl  ,nl ; 

LABEL  AUX;A$SUME  INTEGERfnl); 

VE  THNFRO.xl.nl.fl; 

V«  ARITH1  ,numbfr«»»ocr'  1 ,n  1 ,♦  1 ),x2;  TAUT  -:«2,HPT:-;substr  - in j 

V«  ARlTH2tnl  ;TAUT  -:»2,nPT:-;$UBSTR-IN  — ; 

TAUTEQ  -:»2,HPT:-; 

V«  SUBOEFO  xl,x2,fl,f2; 

Ve  LEMMA l,x2.«2,nl; 

Ve  LEMMA2.nl, «1,«2; 

1 

TAUTEQ  — :»2«2«l»2[n*-nl],  HPT 
=1  AUX,-; 

Vi  -,nl ; 

TAUTEQ :»1 , HPT:-; 

3l  HPT,-; 

VI  -,xl ,x2,f  1 ,f2; 


4.4  Ptmlnut  nf  (he  proof  in  i li c earlier  axinmatintion 

1 Vn  x {(lNTEGER(n)AlNDVAR{x))o(n*(len(x)-l))»0)  (1) 

2 Vn.(INTEGER(n)={0*n)rn)  (2) 

3 Vx.(INDVAR(x)=(len(x)-l  )*0)  (3) 
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4 Vn.(INTEGER(n)3(n-0)*n)  (4) 

5 Vx.  iNDVAR(x)=(l  gl  x).x)  (5) 

6 INDVAR(x)A(FORM(f)A(INTEGER(n)ASUBT(x,<,n)))  (6) 

7 INTEGERU)  (7) 

8 SUBT(x,<,n)*(TERM(x)A(F0RM«)A(INTEGER(n)AVx2  k.((INDVAR(x2)A(INTEGER(k)A(k  gl  x) 
•x2))=>FRN(x2.n-(l*n(x)-k), ())))) 

9 Vx2  k.((;N0VAR(x2)A(IN1EGER(k)A(k  gl  x)*x2))3FRN(x2,n*(l*n(x)*k),f))  (6) 

10  (INDVAR(x)a(INTEGER(I  )a(1  gl  x)*x))=»FRN(x,n-(len(x)*l),f)  (6) 

1 1 INDVAR(x)3(I  gl  x)*x  (5) 

12  (I  gl  x)--x  (5  6 7) 

13  (INDVAR(x)a(INTEGER(I  )Ax=x))=FRN(x,n-(l*n(x)-l ),()  (5  6 7) 

14  INDVAR(x)3(l«n(x)-l)*0  (3) 

1 5 (l'in(x)-l  )*0  (3  5 6 7) 

16  (lNDVAP(x)A(INTEGER(l)Ax.x))3FRN(x,t-0,<)  (3  5 6 7) 

17  lNTEGER(n)a(n-0)«n  (4) 

18  (n-O)-n  (3  4 5 6 7) 

19  (INDVAR(x)a(INTEGER(I  )ax-x ))=FRN(x,n,f)  (3  4 5 6 7) 

20  FRN(x,n,()  (3  4 5 6 7) 

21  (INDVAR(x)A(F0RM(f)A(INTEGER(n)ASU8T(x,f,n))))3FRN(x,n,0  (3  4 5 7) 

22  Vx  ( n((INDVAR(x)A(F0RM(f)A(INTEGER(n)ASUBT(x,f,n))))3FRN(x1n,f))  (3  4 5 7) 

23  INVART(k,fl,k,f2HINTEGER(k)A(FORM(ll)A(INTEGER(k)A(FORM((2)A((GEB(k  gl  (2,k,(2)s 
GEB(k  gl  (l,Ml))A((FRN(k  gl  f2,k,f2)  FF7N(k  gl  fl,k,fl  ))A(k  gl  (2)«(k  gl  fl ))))))) 

24  INVARV(k,(l,f2)  (INiEGER(k)A(FORM«l)A(FORM(f2)A((GEB(k|l  f2,M2)sGEB(k  gl  »l,k,fl))A 
((FRN(k  gl  (2,k,»2)  FRN(k  gl  f 1 .k.f  1 ))a(K  gl  (2)*(k  gl  (1)))))) 

25  INVART(k,(l  ,k,f2)  INVARV(k,f  1 ,<2) 

26  Vk  fl  12  (INVART(k,f l,k,f2)'INVARV(k,f  1,(2)) 

27  lN0VAR(xl  )a(INDVAR(x2)a(F0RM(( I )a(FORM((2)aSBT(x1,x2,(1,I2))))  (27) 

28  Vx2  (IN0VAR(x2)aTERM(x2))  (28) 
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29  INDVAR(x2)aTERM(x2)  (28) 

30  Vxl  nl  f I INTEGER(numbfreeocc(xl ,n! ,fl ))  (30) 

31  SBT(xl,x2,(l1f2)=((lNDVAR(xl)A(TERM(x2)A(F0RM((l)AF0RM(f2))))3Vnl  n2  ((INTEGER(nl )a 
(lNTEGER(n2)An2'((numbfrp«*occ(xl  ,n  1 ,f  1 )*(len(x2)-l  ))«nl  )))3(HNDVAR(nl  cl  f 1 )o 

(nl  *1  MMn2  gl  12 ))a(1NDVAR <n I pj  (1  )s((FRN(xl  ,nl  ,(1  )=SUBT(x2,»2,n2))A 
(-F^N(x  1 ,n 1 ,1 1 )slhVART(n  I ,( 1 ,n2 ,f 2 >)))))) 

32  Vnl  n2.((!NTEGER(nl  )a (INTEGER (n 2 )An2=((numbfreeocc(xl ,nl  ,f  I )*(len'x2)-l  ))#nl  )))o 
(HNDVAR(nl  gl  fl)s(nl  rI  Il)--(n2  rI  f 2 >>a (INDV AR (n  1 Kl  f 1 )=((FRN(x I ,n  1 1 )=> 
SUBT(x2,(2,n2))A('FRN(x  1 ,nl  ,f  I )ulNVART(nl,fl  ,n2,f2))))))  (27  28  30) 

33  (INTEGER(nl  )a (INTEGER (nl ) a n 1 =((numbfreoocc(xl  ,n  1 ,(1  )#(len(x2)-l  ))«nl  )))=( 

(-INDVARfnl  glfl)=>(nl  gl  f 1 )=(nl  p,i  (2))A(INDVAR(nl  rI  II )s((FRN(xl ,nl ,(1 )=> 

SUE3T (x2,f2,nl  ))a(-FRN(x1  ,nl ,( 1 )=lNVART(nl  ,11  ,nl  ,f2)))))  (27  28  30) 

34  INTEGER(nl)  (34) 


35  INTEGER(numbfreeocc(xl  ,nl  ,1 1 ))  (30) 


36  (INTEGER(nim bfreoocc(xl  '•i  ,11  ))AlNDVAR(x2))3(numbfreeocc(xl  ,nl,(l  )*(l«n(x2)-l  ))«0  (1) 
- 37  (numb(reeocc(xl,nl1fl)*(lon(x2)-l))-0  (1  27  28  30  34) 
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(INT E GER (n  1 )A(INTEGER(nl  )An  1 *(0‘ni  )))s(MNDVAR(nl  gl  f I )={nl 
(INDVAR(nl  gl  fl  )=((rRN(xl  ,nl  ,»1  )aSUBT(x2,f2,nl  ))a(-.FRN(xI ,nl ,f  1 ) 
INVART (nltfl  ,nl,f2)))))  (1  27  28  30  34) 


gl  fl)«(nl  gl  (2))a 

3 


39  INTEGER(nl  )=>(0*n  1 )-ii  (2) 


40  (0*nl)ml  (I  2 27  28  30  34) 

41  (INTEGER  (n  I )A(INTEGER(n  1 )An  1 =n  I ))=((-INDVAR(nl  gl  f | )=»(nl  glflMnl  gl  (2))a 
(INDVAR(nl  gl  f I )s((FRN(x  1 ,nl  ,1 1 )^SUBT(x2,f 2,nl  ))aKRN(xI  ,nl  ,fl  )o 

INVAR T (n  1 ,f I ,n I ,f 2)))))  (I  2 27  28  30  34) 

42  (-INDVAR(nl  gl  f I )=>(nl  gl  f 1 )=(nl  rI  f 2))A(INDVAR(nl  gl  (1  )a((FRN(xl  ,nl I )o 
SUBT(x2If2,nl))A(-FRN(xl,nl,fl)3lNVART(nl,fl,nl,(2))))  (I  2 27  28  30  34) 

43  SBV(xl1x2,fl1f2)^((INDVAR(xl)A(IN0VAR(x2)A(F0RM(ll)AF0RM((2))))3Vn.(INTEGER(n)3( 

(-INDVAR(n  gl  f 1 )s(n  gl  f 1 )=(n  gl  f 2 ) ) a (INDV  AR(n  gl  fl  )=((FRN(xl,n,fl  )=> 
FRN(x2,n,<2))A(-FRN(xl,n,fl  )->INVARV(n,f! ,(2))))))) 

44  (INDVAR(x2)A(F0RW(f2)A(INTEGER(nl)ASUBT(x2,f2,nl))))3FRN(x21nl,f2)  (3  4 5 7) 

45  INVART(nl  ,f I ,nl  ,f2)  INVARV(nl  ,f  I ,f2) 

46  HNDVAR(nl  gl  f 1 )=(n I glflHnl  rI  f2))A(INDVAR(nl  gl  fl M(FRN(xl ,nl ,f  1 )o 
FRN(x2,nl  ,f2))A(->FRN(xl  pnl  ,f  I )slNVARV(nl  ,f  I ,f 2 ))))  (I  2 3 4 5 7 27  28  30  34) 

47  INTEGEP(nl)=(HNOVAR(nl  rI  fl)a(nl  glflMni  gl  f2))A(INDVAR(nl  glfl)s 
(FRN(xl,nl,fl)3FR  N(x2,nl  ,f2))A(-FRN(xl ,nl,f I )slNVARV(nl  ,M,f2)))))  (1  2 3 4 5 
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7 27  28  30) 

48  Vnl. {INTEGERS!  )3(HNDVAR(nl  gl  fl)='ni  gl<l)*(nl  tl  <2))A(INDVAR(nl  *lfl)D 
((FRN(xl  ,nl,fl  )=FRN(x2,nl ,f 2 ))a(-FRN(x! ,n  1 ,f  1 )»INVARV(nl tfl,f2)))))>  (12  3 4 

5 7 27  28  30) 

49  SBV(x  1 ,x2,f  1 ,f2)  (1  2 3 4 5 7 27  28  30  34) 

50  (INDVAR(x  1 )a(INDVAR(x2)a(F0RM(1 I )A(F0RW(f2)ASBT(x  1 ,x2,f  1 ,f 2 )))))=>SB V(xl  .x2.fl.f2) 
(1  2 3 4 5 7 28  30  34) 

51  Vxl  x2  fl  <2.((INDVAR(xl)A(INDVAR(x2)A(F0RM(fl)A(F0RM(f2)ASBT(xl,x2,fl,f2)))))3 
SB V (x  1 ,x 2 ,f  1 ,f 2 ))  (1  2 3 4 5 7 28  30) 


I 
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APPENDIX  5 


'HE  PROOF  THAT  UNIVERSAL  QUANTIFIER  CAN  BE  INTERCHANGED 


5.1  FOL  cot!) ni a nas  for  ;i>?  main  lemma  lit  flic  many  sorted  logic 

LABEL  THI  j ASSUME  Vxl  x2  11  f2.(SaT(xl  ,x2,tl ,f2)=»  SBV(xl ,x2,f  1 ,f2)); 
Vo  THI,  x.x.fl ,sbi(x,x.n ); 

VE  SU3STDF3  x,y,  !!,  r,bt(x,x,!l); 

'•  SUBDEFC  x,  x.fi.sbllx.x/l): 
tautoq  *:*2  I:-; 

Vo  ',n; 

VE  FREEVO,  x,  o,  f I ; 

VE  FREEVO,  x,  r.,  sbll  i Js 

VE  SUSDEF 1 n,  <1 , sbS(v,x,«I ); 

taultq  (»  gi  f'/r(ri  gl  sbt'x,x,il  /),  1 1 , 1 7 , 1£; 

Vi  -,n; 

VE  ECS  fl.sH'x.t.ft); 
tauloe  sbi(x,w,!n«f I 
Vi  -,x,ISH; 


5.2  Printout  of  tl-.e  proof  in  the  many  sorted  logic 

1 Vxl  >2  li  t2.{5B7(xI,x2ltl,f2)3S5V(xl,x2,fllf2j)  0) 

2 SBT(x,x,fl ,*.bi''!,x(f 1 }}_$PV(x,x,fl  ,sbt{x,x,fl))  (I) 

3 SBTfx,y,fl  ,r.b*(x.x,f!  ))'sbt(x,x,U  )**bt(x,x,fl) 

4 SBV(x,x,li  tsbl(x,x,f  I ))‘Vn.((-INDVAR(n  gl  II  )=»«>.  gl  Il)*(n  gl  sbl(x,x.?l  i))A 
(INDVAR(n  gl  il  )^((FRN(x,r,fl  ):jFRN(x  n,r.bt(x,x,f  I ));A(-FRN(xrn,f  I )=INVARV(n, 
f 1 ,sbt(x,x,f  I )))))) 

5 Vn.((-INDVAF(r  gl  f ? )=»("  »l  fl  )=(n  gl  sbMx.x.f  1 )>}/\(!NDV <VR(n  gi  I i ):?(fFRN(x, 
n,f  I )3FRN(x,n,sbt(x,x,U  )))M-FRN(x,n,(l  )alNVARV(n,U  ,sbl(x,x,ll ))))))  (I ) 

6 (->INDVAR(n  gl  f 1 )=>(n  r.l  f 1 )-(n  gl  r,bt(x,x,fl  )))A(INDVAR(n  gl  II  )a((FRN(xfn,l  1 )= 
FRN(x,n,sbt(x,x,ll  )))A(-FRN(x,n,f  I ) =»INVARV(n,f  I ,sbt(x,x,f  I )))))  (1) 

7 FRN(x,n,flMx*(n  gl  » 1 )a-GEB (x,n,f  1 ))  VE  FREEVO  x , n , II 

8 FRN(x,n,sbl(x,x,ll  )Hxr(n  gl  sbtfx.x.f  I ))A-GEB(x,n,sbt(x,x,ll ))) 

9 INVARV(n,ll ,sbl(x,x,H )H(GEB(r  gl  sbt(x,x,U),n1«bt(x,x,ll))*GEB{n  gl  f I ,n,f  I »a 
((FRN(n  gl  sbl(x1x,ll),n,sbl(x,x,ll))-FRN(n  gl  <l,n,ll))A(n  gl  sbt(x,x,!l  ))• 

(n  gl  II))) 


10  (n  gl  II  )*(n  gl  tbt(x,x,ll ))  (I) 
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11  Vn.(n  el  ll)«(n  gl  sbt(x(x,f  1 ))  (1) 

12  Vn(n  gl  fl)*(n  gl  tbt(x,x,fl  ))»f  1 ■sbt(x,xlf  1 ) 

13  sbt{x,x,f  1 )«  0 (I) 

14  Vx  f sbt(x,x,fW  (1 ) 


5.3  FOL  commands  for  the  theorem  in  the  many  sorted  logic 

LABEL  FIRSTLEMMA; 

ASSUME  Vx  f sbt(x,x,«)  -f; 

LABEL  THEONI ; 

ASSUME  Vf  tq.scarff  ce  sq)  • f ; 

LABEL  THE0N2; 

ASSUME  Vf  sq.scdr(f  cc  sq)  ■ sq; 

Proof  of  the  Lemma:  BEW(x  g®n  f)  s BEW(f) 

LABEL  HPT; 

ASSUME  BEW(x  g®n  f)  ; 

LABEL  THTAUT; 

V®  FIRSTLEMMA  x,  f; 

V®  PROVABLE  x g®n  f ; 

TAUT  -;«2  , -,HPT; 

LABEL  HPAUX; 

3*  - ,sq  ; 


V®  GENRULO  f ee  sq  ,sqtx,x; 

LABEL  THN1 ; 

V®  THEONI  f,  sq; 

V®  THE0N2  «,  sq; 

TAUTEQ  — :«2»2«2»l[fl*- fJ,ls-5 
UNIFY  — -t»2«2«2  •; 

TAUTEQ  :•  1 , I:-* 


V®  PROOF  « ec  sq  ; 

LABEL  GENE  I ; 

vl  GENIO  ce  sq,sq,x,x) , — , EXI(f  ec  sq,sq,x,x)  ; 
UNIFY  — :*2»2«2«1  , - ; 

LABEL  PROOFTR; 

TAUT  — :*l,  I 


A®  HPAUX  :«2«2; 
V®  - . II; 
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Ve  DEPENDO  f cc  sq,  sq.ll; 

UNIFY  -:*2*2*2*2*2,  GENE  I ; 

TAUTEQ  DEPENDO  cc  sq.ll)  a AXIOM  (II)  ,ls-; 
Vi  -.11-11; 

TAUTEQ  THNI  :*2  • THN1  :«1  ,THNI ; 

Ai  PROOFTR,  - , — ; 

LABEL  USEFUL; 

Ve  PROVABLE  I; 

UNIFY  -:»2 
TAUT  — s*l  ,1 
LABEL  CITHI; 
al  HPT,-; 

Prcof  of  the  Lemma  BEW(f)  s BEW(x  gen  I) 

LABEL  HPT1 ; 

ASSUME  BEW(I); 

TAUT  U$EFUL:»2  , -,HPT  I .USEFUL; 

3«  - ,sq; 


a*  -:«2«2; 

Ve  - ,11; 

V*  GENRUL2  x,sq; 

Ve  THEORY  x.f  1 ; 

TAUTEQ  -:«2a|»l[l-fl]  .HPT1 :-; 

Vi  - ,11-11 ; 

TAUT :«l  ,HPTI :-; 

Ve  GENRUL1  ((x  pen  I)  re  sq)  , sq  ,x,x  ; 

LABEL  THN2; 

Ve  THEONI  x Ren  I , sq  ; 

Ve  THEON2  x Ren  I , sq  ; 

TAUTEQ  — :»2*2*2«l (I I - I)  , THTAUT.HPTI :-; 

UNIFY  :»2»2»2  , -; 

TAUTEQ  :•»  1 .THTAUT.HPTI:-; 


Ve  PROOF  (x  gen  I)  cc  sq  ; 

LABEL  GENI; 

vi  --  , GENE((x  Ren  I)  cc  sq,sq,x,x)  , EXI((x  gen  I)  cc  sq.sq.x.x)  ; 
UNIFY  — :«2«2»2«l  , - ; 

LABEL  PROOFTR  1; 

TAUT  — :»l,  HPTI:-,THTAUT; 


Ve  DEPENDO  (x  gen  I)  cc  sq,  sq.ll; 

31  GEN!  ,x-l  OCC  3 6 9,x-xl  OCC  2 4 6; 


TAUTEQ  DEPEND((x  gen  I)  cc  sq.ll)  a AXIOM  (II ) .THTAUT.HPTI 
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Vi  -.MMls 

TAUTEQ  THN2:«2  • THN2:«I  ,THN2; 
Ai  PROOFTRi,  - , ; 

V*  PROVABLE  x gen  f; 

UNIFY  -:«2 

TAUT  1 .THTAUT.HPT I 
LABEL  C2THI ; 

=>l  HPTI 

«l  CITHI.C2THI; 

LABEL  THI; 

VI  -,x,f; 

Ve  THI  x I ,x2  gen  (} 

Ve  THI  x2,f; 

Ve  THI  xl 

Ve  THI  x2,xl  gen  f; 

TAUT  - — :«l  a -:e|,  THI:-; 

VI  -,xl  ,x2,f; 


5.4  Printout  of  the  proof  of  the  theorem  in  the  many  sorted  logic 

1 Vx  f.sbt(x,x,f)»f  (1) 

2 Vf  sq.scar(f  cc  sqW  (2) 

3 VI  cq  scdr(l  cc  sq)*sq  (3) 

4 BEW(x  gen  0 (4) 

5 sbt(x,x,f)«f  (1) 

6 BEW(x  gen  f)=3sq  (PROOFTREE(sq)A«x  gen  f)sscar(sq)AVf|.(DEPEND(sq,fl  )=>AXI0M(f  1 )))) 

7 3sq  (PR00FTREE(sq)A((x  gen  f)=scar(sq)AVf I (DEPEND(sq,f I )aAXI0M(f  1 >)))  (4) 
g PROOFTREE(sq)A((x  gen  l)«scar(sq)AVfl  .(0EPEN0(sq,tl  )aAXI0M(f  1 )))  (8) 

9 GENE(f  cc  sq,sq,x,x)-(scdr(f  cc  sq)«sqA(PR00FTREE(sq)A3fl  ,(sc«r(*qMx  gen  M)a 
8C«r(<  cc  sq)=sbt (x,x,f  1 )))) 

10  ccar(f  cc  tq)3f  (2) 

1 1 «cdr(f  cc  sq)*sq  (3) 

12  ec«r(sq)s(x  gen  f)Ascar(f  cc  sq)3sbt(x,x,f)  (12  3 4 8) 

13  311  (sc«r(sq)=(x  gen  fl)Ascar(f  cc  sq)*sbt(x,x,f  I ))  (12  3 4 8) 

14  GENE(f  cc  sq,sq,x,x)  (1  2 3 4 8) 


I 5 PR00FTREE(f  cc  sq)  (F0RM«  cc  sq)v(3pf  (0RI(f  cc  sq,pf)v(ANDE(f  cc  sq,pf)v 
(FALSEEd  cc  sq,pf)v(N0TI(f  cc  sq,pf)v(N0TE(f  cc  sq,pl)vlMPLI(f  cc  sq,pf))))))v 
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(3p<  x t.(GENI((  cc  sq,pf,x,()v(GENE(l  cc  sq.pf tx,f )vEXI(f  cc  sq,pf,x,t)))v 
(3p<l  pf2.(ANDI((  cc  sq,p<l.p<2MFALSEI(f  cc  sq,p(l  ,p(2)vlMPLE(f  cc  sq,pl  1 ,p!2)))v 
3pfl  pi 2 x I.EXEd  cc  sq,p«l,pf2,x,()v3p<l  pf2  pf30RE(l  cc  sq.pfl ,pf2,p(3)))))) 

16  GENId  cc  sq,sq,x,x)v(GENE«  cc  sq,sq,x,x)vEXI(l  cc  sq,sq,x,x))  (1  2 3 A 8) 

17  3p«  x 1 (GENI(f  cc  sq.pl.x.lMGENEd  cc  sq.pl, x,t)vEXI(»  cc  sq,pl,x,t)))  (12  3 4 8) 

18  PROOFTREEd  cc  sq)  (12  3 4 8) 

19  Vfl  (DEPEND(sq,«l)3AXIOM(«l))  (8) 

20  DEPEN0(sq,fl)3AXI0M(fl)  (8) 

21  PROOFTREEd  cc  5q)=(PRO0FTREE(sq)3((sq=sedr(l  cc  sqMDEPENDd  cc  *q,ll)» 
DEPEND(sq,ll  )))r(0RI(l  cc  sq,'.q)v(ANDEd  cc  r.q,sq)v(FALSEEd  cc  sq,cq)v 
(3».((NOTIO«  cc  sq,sq,l)v(NOTEDd  cc  sq,sq,l)vlMPLIDd  cc  sq,sq,»)))Af/l|  )v 

3*  MGENKI  cc  sq,cq,x,1)v(GENE(f  cc  sq,sq,x,l)vEXId  ee  sq,sq,x,t))))))))) 

22  3x  1 (GENId  cc  sq,tq,x,1)v(GENEd  ee  *q,sq,x,l)vEXI(!  cc  cq,iq,x,1)))  (1  2 3 4 8) 

23  DEPENOd  cc  sq,f1)3AXIOM(fl)  (12  3 4 8) 

24  Vfl  (DEPENDd  cc  cq,f  1 JsAXIOMdl ))  (12  3 4 8) 

25  (■*car(l  cc  sq)  (2) 

26  PROOFTREEd  cc  sq)A(|rScard  cc  sq)AVfl  . (DEPENDd  cc  sq.fDsAXIOMdl)))  (12  3 

27  BEW(f  )-35q.(PR00FTREE(sq)A(f=scar(-;q)AVf  1 (DEPEND(sq,f  I )sAX10M(f  1 )))) 

28  3sq.(PR00FTREE(sq)Ad=scar(sq)AV)I  (DEPEND(sq,»l)3AXI0M(»l))))  (12  3 4) 

29  BEW(f)  (12  3 4) 

30  BEW(x  gtn  f)30EW(l)  (1  2 3) 

31  BEW(f)  (31) 

32  3sq.(PR00FTREE(sq)A(f:scar(sq)AVf I .(DEPEND(sq,f I )3AXI0M(fl ))))  (31 ) 

33  PROOFTREE(sq)A(f=scar(sq)AVf  1 (DEPEND(sq,ll  )3AXI0M(fl )))  (33) 

34  VII  (DEPEND(sq,ll)3AXI0M(fl))  (33) 

35  DEPEND(sq,(l)3AXI0M(ll)  (33) 

36  APGENI(x,sq)'(VI  (DEPEND(sq,l)3'FR(x,l))APR00FTREE(sq)) 

37  AX10M(II)3-FR(x,II) 

38  DEPEND(sq,l I )3-FR(x,l  1 ) (31  33) 


4 8) 
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39  Vfl  (DEPEND(sqp(l  )3*FR(x,f  I ))  (31  33) 

40  APGENI(x,sq)  (31  33) 

41  GENI((x  gen  1)  cc  sq.sq.x.x )- ( ;cdr((x  gen  ()  cc  sq)=sqA(PR00FTREE(sq)A 
311  (sc«r((x  gen  ()  cc  sq)=(x  Ron  (1  )A(scar(sq)=sbl(xpxp(l  )AAPGENI(xpsq))))) 

42  scer((x  gen  f)  cc  sq)=(x  Ren  f)  (2) 

43  scdr((x  R#n  f)  cc  sq)=sq  (3) 

44  s e«r((x  Ren  ()  cc  sq)=(x  Ren  f)A(?car(sq)=«;bt(xpxpl)AAPGENI(xpsq))  (1  2 3 31  33) 

45  3f  1 (scar((x  Ren  ()  cc  r,q)=(x  Ren  11  )A(5car(sq)-sbt(xpxpf  I )AAPGENI(x,sq)))  (12  3 31  33) 

46  GENI((x  Ren  1)  cc  sq.sq.x.x)  (1  2 3 31  33) 

47  PROOFTREE((x  Ren  f)  cc  sq)  (FORM((x  Ren  1)  cc  sq)v(3pf  (0RI((x  Ren  f)  cc  sq,p»)v 
(ANDE((x  Ren  f)  cc  sq,pf)v(FALSEE((x  Ren  1)  cc  sq,pf)v(NOTI((x  Ren  1)  cc  sq.pfjv 
(NOTE((x  Ren  0 cc  sq,pf)vlMPL!((x  Ron  1)  cc  sq,pf))))))v(3p(  xl  f.(GENI((x  Ren  1) 

cc  sq,p(pxlpl)v(GENE((x  Ren  1)  cc  cq.pf.x  1 pt)vEXI((x  Ren  t)  ee  sq,pf,xl  pt)))v 
Ppfl  pf 2 (ANDI((x  Ren  f)  cc  sq,p(l  ,pf2)v(FALSEI((x  Ren  *)  ee  cq.pf  1 ,pf2)v 
IMPLE((x  Ren  f)  cc  cq.pf  1 Ppf2)))v(lp(l  PI2  xl  fEXE((x  Ren  f)  cc  sq.pf I ,pf2,x  1 ,t)v 
3p(l  pf 2 pf3  0RE((x  Ren  1)  cc  cq.pf  1 ,p(2pp(3)))))) 

48  GENI((x  Ren  1)  cc  sq,sq,xpx)v(GENE((x  pen  1)  cc  sqpsqpxpx)vEXI((x  Ren  f)  cc  sq, 
sq.x.x))  (I  2 3 31  33) 

49  3pf  xl  I (GEM((x  Ron  ()  cc  sq,pf,x  I ,t)v(GENE((x  Ren  1)  cc  tqppt,xlpf)v 
EXI((x  Ren  I)  cc  sq,p»  1 ,t)))  (I  2 3 3i  33) 

50  PROOFTREE((x  gen  1)  cc  sq)  (12  3 31  33) 

51  PROOFTREE((x  Ren  f)  cc  sq)=(PROOFTREE('-.q)3((sq=scdr((x  Ren  1)  cc  sq):>(DEPEND( 

(x  Ren  f)  cc  sq.ll ) DEPEND(cq,f  1 )))  (0RI((x  Ron  I)  cc  sqpsq)v(ANDE((x  Ren  1) 

cc  sq,sq)v(FALSEE((x  Ren  f)  cc  sq  sq)v(3f.((NOTID((x  Ren  f)  cc  sqpsqp»)v 
(NOTED((x  Ron  f)  cc  sq.r.q.f )vlMPLID((x  Ron  1)  cc  sq,sqpf)))Af/f  1 )v 
3x1  1 (GENI((x  Ren  f)  cc  r.qpsq,x!  ,t)v(GENE((x  Rer.  1)  cc  $q,sq,x I lt)vEXI( 

(x  gen  1)  cc  sq,sqtx  1 pf ))))))))) 

52  3x1  1 (GENI((x  gen  1)  cc  sq.sq.xl ,t)v(GENE((x  gen  f)  cc  sqpsq,xlpf)v 
EXI((x  gen  1)  cc  sq.sq.xl ,()))  (1  2 3 31  33) 

53  DEPEND((x  gen  !)  cc  sqpfl  )=>AXI0M(fl ) (1  2 3 31  33) 

54  Vfl  (DEPEND((x  gen  1)  cc  eq,f  1 )=>AXI0M(f  1 ))  (1  2 3 31  33) 

55  (x  gen  f)>scar((x  gen  f)  cc  sq)  (2) 

56  PR00FTREE((x  gen  f)  cc  sq)A((x  Ron  ()=scar<(x  gen  f)  cc  sq)A 
Vfl  (DEPENDUx  gen  1)  cc  sq.fl  )=AXI0M(fl )))  (1  2 3 31  33) 

57  BEW(x  gen  f)’3sq  (PP00FTREE(sq)A((x  gen  f)=scar(sq)AV»|  ,(DEPEND(sqpf  1 )3AXI0M(»1 )))) 
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5*  3tq.(PR00FrREE(sq)A((x  gan  f)>tcar(sq)AVf  |(DEPENO(tq,fl  )sAXIOM(f  1 ))))  (|  2 3 31) 

59  BEW(x  (in  I)  (I  2 3 31) 

60  BEW(f)=>8EW(«  gan  f)  (I  2 3) 

61  BEW(x  t<n  t)'BEW(l)  (I  2 3) 

62  Vx  f (BEW(x  can  l)BEW(f))  (I  2 3) 

63  BEW(xl  tan  (x2  gan  f))=BEW(x2  gan  f)  (I  2 3) 

64  BEW(x2  |an  f)-BEW(f)  (I  2 3) 

65  BEW(xl  gan  f)=BEW(f)  (1  2 3) 

66  BEW(x2  gan  (xl  gan  f))=BEW(xl  gan  I)  (1  2 3) 

67  BEWfxl  gan  (x2  gan  f))aBEW(x2  gan  (xl  gan  ())  (I  2 3) 

66  Vxl  x2  ♦ (BEW(xl  gan  (x2  gan  I))  a BEW(x2  gan  (xl  gan  1)))  (1  2 3) 


5 5 FOL  cmm n.i ml <.  for  the  mini  Irmini  in  the  earlier  axioinatization 
LABEL  HPT;  ASSUME  INDVAR(x)  a FORM(fl)  ; 

LABEL  THI  ; ASSUME  Vxl  x2  II  12  ((INDVAR(xl)  a INDVAR(x2)  a FORM(fl)  a E0RM((2)  a 
SBT(x  I ,x2,l  1 ,121)  = SBV(xl  ,x2,fl  ,f2)); 

LABEL  TH2  ; ASSUMF  v-  (INDVAR(x)  a TERM(x)); 

LABEL  TH3  ; ASSUME  V.  vF0RM(x)  a STRING(x)); 

Va  THI,  x,x,f  1 ,sbt(x,x,f  I ); 

Va  TH2,  x; 

Va  TH3,  fl; 

Va  TH3,  e bt ( x ,x ,( I ); 

VE  SUBST0F3  x.x,  f 1 , sbt(x,x,fl ); 

VE  SUBSTDF4  x.x,  fl; 

Va  SUBDEFO  x,  x,f  I ,sbt(x,x,(l ); 
tautaq  -:«2*2,l 
Va  *,n; 

VE  FREEVO,  x,  n,  fl; 

VE  FREEVO,  x,  n,  sbf(x,x,fl); 

VE  SUBDEFI  n,  fl , tbf(x,x,f I ); 

tautaq  INTEGER(n)  3 ((n  gl  fl)«(n  gl  sbt(x,x,f  I ))) 

Vi  -,n; 

VE  EQS,  f I ,sbt(x,x,f  I ); 
taut  -:e2a2,ls-; 

=*i,ls»j 
VI  — ,x,f  1 *"f; 
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5.6  Printout  of  the  proof  of  the  main  lemma  in  the  second  axlomatizatiou 

1 INDVAR(x)aFORM((  I ) (1)  ASSUME 

2 ^BVfxf.xl.tT't^')^0^)^  ASSAUM^VA^(K2^A^^^^^*  )a(F0RM((2)aSBT(x1px2,I  1,12 )))))» 

3 Vx  (lNDVAR(x)aTERM(x))  (3)  ASSUME 

4 Vx  (FORM(x)rSTRING(x))  (4)  ASSUME 

5 c!Tl?/VAF!<.X)C!l/NDV«f!?»(X/)C»<F0RM(,1,A(F0RM(5b,(x,x,,i  ))ASBT(x<x*,1'*bt<x.x.fi  ))»»=> 

$6V(xpxpf  1 ,sbt(x,x,f I ))  (2)  VE  2 x , x , f 1 , sbt(x,x,(l ) 

6 INDVAR(x)sTERM(x)  (3)  VE  3 x 


7 rORM(f  I )=»STRING(fl  > (4)  VE  4 <1 

8 FORM(sb*(x,x,tl  ))=STRING(5bt(x,x,tl ))  (4)  YE  4 *bt(x,x,tl ) 

9 (INDVAR(x)a(TERM(x)a(FORM((  1 )AFORM(sbt(x,xptl  )))))3(SBT(x,x,f  I tbt(x  x f 1 ))i 

sbt(x,x,t  1 )=sbt (x,x,f  I ))  VE  SUBSTDF3  x , x , tl  , sbt(x,x,<|) 

10  (INDVAR(x)a(TERM(x)aFORM(U )))3F0RM(nbHx1xltl ))  VE  SUBSTDF4  x , x , f| 

1 1 SBV(x,x,f  1 ,r.bt(x,xpf  I ))  ((INDVAR(x)a(INDVAR(x)a (FOR M(ll  )AFORM(sbt(x.x.( i )))))=» 
VMINTEGER(n)3(HNDvAR(n  rI  (l)a(n  f.l  »l)*(n  g|  sbt(x,x,f I )))A(INDVAR(n  gl  f 1 ) 
=((rRN(x^n^FRN(x,n1^bt(x,x,f  I )))A(-FRN(x,n,f I )3lNVARV(npfl  ,sbt(x,xpfl )))))) 

12  Vn.(INTEGER(n)3(HKuVAR(n  p.l  f I )=»(n  rI  UMn  gl  sbt(x,x,fi)))A(INDVAR(n  el  fl) 
3((FRN(x,n,(l  >=FRN(x,n,-;bt(x  ,x,t|  )))A(-FRN(x,n,tl  )s 

INVARV (n,f  I ,sbt(x,x,f  I )))))))  (12  3 4)  1:11 

!3  INTEGER(n)=(HNDVAR(n  f,l  tl  )=>(n  Rl  f 1 )=(n  gl  sbl(x,x,fl  )))A(INDVAR(n  el  f 1 )=> 
((FRN(x,n,(l  )=FRN(x,n,5bt(x1x1<l)))A(-FRN(x,n,fl)3lNVARV(n,fl,sbl(xpx,(l)))))) 

(1  2 3 4)  VE  12  n 


14  FRN(x,n,f  I )’(x*(n  rI  tl  )a-GEB (x,npf  1 ))  VE  FREEVO  x p n p (I 

15  FRN(x,n,sbl(x,xp<l  ))~(x=(n  rI  Sbl(xpxpf  1 ))A-GEB(xpnpsbt (x.x.f  1 )))  VE  FREEVO  x , n , sb1(x,xpfl ) 

16  INVARV(n,(l/,bt(x.x,(l))’(INTEGER(n)A(FORM(fl)A(FORM(sbl(x,xpfl))A((GEB(n  el 

sbt(x,xpf  I ),n,sbl(x,x,tl  ))=GEB(  * 

n S1  1 1 ,n,f  1 ))A((FRN(n  rI  sbt(x,x,f  1 ),n,r,bt(x,x,tl ))=FRN(n  gl  fl,np(l))A(n  el 
sbt  (x.x.t  1 ))«(n  rI  tl ))))))  VE  SUB0EF1  n , fl  , sbt(xpxpll) 

17  lNTEGER(n)=(n  rI  tl  )-(n  rI  r.bt(x,xp(l ))  (12  3 4)  1:16 

18  Vn.(INTEGER(n)=(n  rI  t!  )=(n  rI  sbt (xpxp(l ))}  (1  2 3 4)  VI  1 7 n n 

19  (STRlNG((l)ASTRlNG('.bt(x,xptl)))3iVn  (INTEGtR(n)3(n  el  f 1 )«(n  el  sbUx.x  fl  )))* 
f 1 ■sbt(x,x,tl ))  VE  EQS  fl  , sbl(x,xpfl) 
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20  f 1 *sbt(x,x,f ! ) (1  2 3 4)  1:19 

21  (INDVAR(x)aFORM(II  ))y(l  =sbl(x,x,ll ) (2  3 4)  =>1120 

22  Vx  l.((INDV4R(x)AF0RM(())3(«sbl(x,x,l))  (2  3 4)  VI  21  x HI  «-  x 


5 7 FOL  commands  In  the  earlier  axiomatization 


LABEL  FIRSTLEMMA; 

ASSUME  Vx  ( ((INDVAR(x)a  FORM(I))  y sbl(x,x,l)  «(); 

LABEL  THEONI; 

ASSUME  Vs  sq  ((STRING(s)a  SEQUENCE(sq))=>  scarfs  cc  sq)  » s); 

LABEL  THEON2; 

ASSUf  E Vs  sq  ((STRING(s)a  SEQUENCE(sq))yscdr(s  cc  sq)  ■ sq); 

LABEL  TH1 ; 

ASSUME  Vx  I ((INDVAR(x)aF0RM(I))3F0RM(x  gen  f)); 

LABEL  TH2; 

ASSUME  VI  (FORM(f)  =>  STRING(I))  ; 

LABEL  TH3; 

ASSUME  VI  sq  ((FORM«)ASEQUENCE(sq))=>SEQUENCE(f  ££  tq)); 

LABEL  TH4; 

ASSUME  Vx  (INDVAP(x)y  TERM(x)); 

LABEL  TH5; 

ASSUME  Vpl  (PROOFTREE(pl)y  SEQUENCE  (pi)); 

Proof  of  the  Lemma  BEW(x  gen  I)  = BEW(I)  Under  the  Assumption-  INDVAR(x)  a FORM(I) 
LABEL  HPTT; 

ASSUME  INDVAR(x)a  FORM(I); 

LABEL  HPT; 

ASSUME  BEW(x  gen  I)  ; 

LABEL  THTAUT; 

Ve  FIRSTLEMMA  x,  I; 

V#  PROVABLE  x gen  I ; 

VE  THI  x,l; 

TAUT  -:a2«2,  HPTT:-; 

Ve  TH2.I; 

Ve  TH3,f ,sq; 

VE  TH4,x; 

VE  TH5,sq; 

LABEL  HPAUX; 

3e ,sq  ; 


Ve  GENRULO  I cc  sq  ,sq,x,x; 

LABEL  THNI; 

Ve  THEONI  I,  sq; 

Ve  THEON2  I,  sq; 

TAUTEQ  — :*2*2**2*2*»2«*2*»  1 [II  •*  I]  ,1 
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UNIFY  :»2»2»2»2»2»2  , 

TAUTEQ  :»l  , I 

V*  PROOF  f cc  sq  ; 

LABEL  GENE  I ; 

TAUTEQ  PROOF  TREE(sq)A|NDVAR(x)ATERM(x)A(GENI(l  cc  sq.sq.x.x)  v v 
EXI(f  cc  sq,sq,x,x))  I 
UNIFY  — :»2»2»2»1  , - ; 

LABEL  PROOFTRj 
TAUT  — :»l.  Is-; 

A#  HPAUX  :»2»2; 

V*  - ,11; 


Ve  DEPEND  f cc  sq,  sq.fl; 
aE  GENE  I .‘•2; 

UNIFY  — :»2»2»2»2»2,  - ; 

TAUTEQ  DEPENDS  cc  sq.f  I ) a AXIOM  (f I ) ,|  -• 

Vi  -,«|  *-ll ; 

TAUTEQ  <rscar(f  cc  sq)  I:*; 

Ai  PROOFTR,  - , - • 

LABEL  USEFUL; 

Ve  PROVABLE  I; 

UNIFY  -:»2»2 
TAUT  1,1:-; 

LABEL  CITHI; 

=>l  HPT,-; 

Proof  of  the  Lemma  pLA(f)  a BEW(x  g«n  f)  Under  the  Assumption.  INDVAR(x)  a FORM(f) 

LABEL  HFTI; 

ASSUME  BEW(f); 

TAUT  USEFUL:«2  , -,HPT1  .USEFUL; 
aE  -:«2 
3«  - ,sq; 


a#  -:»2»2; 

V.  - , f|; 

Ve  GENRUL2  x,sq; 

Ve  THEORY  x,<l; 

TAUTEQ  ~:»2»l«2«l[fHI]  .HPTT.HPTI 
Vi  - ,<1  -f  I ; 

TAUT :•  1 , HPTT.HPTI.-; 

Ve  GENRUL1  ((x  Ren  f)  cc  sq)  , sq  ,x,x  ; 

LABEL  THN2; 

Ve  THEONi  x p,en  f , sq  ; 

Ve  THEON2  x gen  f , sq  ; 

VE  THI  x ,«; 

VE  TH2  x gen  f; 

VE  TH5  sq; 

TAUTEQ  :*2«2*2»l [f I I]  ,HPTT,  THTAUT.HPTI :-} 
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UNIFY  :»2»2«2  , 

VE  TH3,  x ger  f ,sq; 

TAUTEQ :•!,  HP1T,  THT AUT.HPT I 


Ve  PROOF  (x  gen  f)  cc  sr 
Ve  TH4,x; 

LABEL  GENI; 

TAUTEQ  PROOFTREE(sq)  a INDVAR(x)  a TERM(x)  a ( — : v GENE((x  gen  f)  cc  sq,tq,x,x)  V 
EXI((x  gen  f)  cc  sq,sq,x,x))  HPTT.HPT1 
UNIFY  ---:»2»2»2e I , - ; 

LABEL  PROOFTRI; 

TAUT  HPTI  :-,THTAUT,HPTT; 

Ve  DEPEND  (x  gen  f)  cc  sq,  *q,fl; 
aE  GENI :*2; 

3i  * ,x-t  OCC  2 5 8 II; 

3i  -,  x*-x  I OCC  I 3 5 7; 

TAUTEQ  DEPEND((x  gen  ()  cc  sq.ft)  a AXIOM  (fl)  ,THTAUT,HPTT,HPTI 

Vi  1 1 ; 

TAUTEQ  x gen  f * sear((x  gen  f)  cc  sq),HPTT,HPTI 
ai  PROOFTRI,  - , - ; 

Ve  PROVABLE  x gen  f; 

UNIFY  -:«2e2 

TAUT  ,THTAUT,HPT1 

LABEL  C2THI ; 

=1  HPTI,-; 

’I  C1THI.C2TH1; 

LABEL  THGEN; 

=1  HP7T,-; 

VI 

Ve  THI  xl ,x2  gen  f; 

Ve  THI  x2,f; 

Ve  THI  x I ,f ; 

V#  THI  x2,xl  gen  I; 

VE  THI  ,x  I ,<; 

VE  THI  ,x2,f; 

TAUT  (INDVAR(xl)  a (INDVAR(x2)  a FORM(f)))  a (BEW(xl  gen  (x2  gen  Q)  ■ 

BEW(x2  gen  (xl  gen  »))), THGEN:-; 

VI  *,xl ,x2,f; 


5 6 Printout  of  ihr  pmnf  in  the  earlier  axiomatization 

1 Vx  ».((INDVAR(x)AFORM(f))=sbl(x,x,f)=f)  (I)  ASSUME 

2 Vs  sq  ((STRING(s)ASEQUENCE(sq))=>scar(s  cc  sq)=s)  (2)  ASSUME 

3 Vs  sq  ((STRING(s)ASEQUENCE(sq))=scar(s  cc  sq)*sq)  (3)  ASSUME 


i 
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4 Vx  < ((INDVAR(x)aF0RM(1))=>F0RM(x  gen  0)  (4)  ASSUME 

5 V1.(F0RM(1)=STRING(1))  (5)  ASSUME 


6 Vf  sq  ((FORM(f)ASEQUENCE(sq))=SEQUENCE((  cc  sq))  (6)  ASSUME 

7 Vx.(INDVAR(x)=TERM(x))  (7)  ASSUME 

8 Vpl  (PR00FTREE(pf)=>SEQUENCE(p<))  (8)  ASSUME 


9 INDVAR(x)aFORMO)  (9)  ASSUME 

10  BEW(x  gen  f)  (10)  ASSUME 


11  (lNDVAR(x)AF0RM(())3sbl(x,x,()t(  (1 ) VE  1 x , f 

12  BEW(x  gen  l)r(FORM(x  gen  f)A3sq (PROOFTREE(sq)A((x  gen  l)«tear(sq)AVfl. (DEPEND! 
sq,l  1 )aAXIOM«  1 )))))  VE  PROVABLE  x gen  f 


13  (1NDVAR(x)aF0RM(0)3F0RM(x  gen  1)  (4)  VE  4 x , f 


14  3sq  (PR00FTREE(sq)A((x  gen  <)*scar(sq)AVf  1 (DtPENDUq.ll )=AXI0M(f  1 ))))  (14  9 10)  9 s 13 

15  FORM(f)=>STPING(f)  (5)  VE  5 1 

16  (FOPM(f)ASEQUENCE(sq))=>SEQUENCE«  C£  sq)  (6)  VE  6 f , sq 

17  INDVAR(x)=>TERM(>:)  (7)  VE  7 x 

18  PR00FTREE(sq)3SEOUENCE(5q)  (8)  VE  8 sq 

19  PROOFTREE(sq)A((x  g«n  f)=scar(sq)AV<l.(DLPEND(sq,fl)3AX10M(fl)))  (19)  ASSUME 

20  GENE((  cc  sq,sq,x1x)'(SEOUENCE«  cc  eq)A(INOVAR(x)A(TERM(x)A(scdr(«  ee  sq)-sqA(PROOFTREE(eq)A 
31  1 (F0RM(1  1 )A(scar(sq)=(x  gen  f 1 )a 

•car (t  cc  sq)*sbi(x,x,ll ))))))))  VE  GENRULO  ( cc  sq  , sq  , x , x 

21  (STRING(f)ASEQUENCE(sq))3Scar((  cc  sq)*f  (2)  VE  2 f , sq 

22  (STRING(>>SEQUENCE(sq))=>scdr(l  « sq)=sq  (3)  VE  3 1 , sq 

23  FORM(f)A(scar(sq)*(x  gen  l)Ascar((  cc  sq)=sbl(x,x,l))  (1  2 3 4 5 6 7 8 9 10  1 9)  1 s 22 

24  311  (F0RM(<1  )A(scar(sq)=(x  gen  (l)Ascar(f  cc  sq)=sbl(x,x,ll )))  (1  2 3 4 5 6 7 8 9 10  1 9)  UNIFY  23 

25  GENEd  cc  sq.sq.x.x)  (12  3 4 5 6 7 8 9 10  19)  1 : 24 

26  PROOFTREEO  cc  sq)  ((SEQUENCEd  cc  sq)AFORM((  cc  sq^vOpUPROOPTREElpOAlORId  cc  sq,pf)v 
(ANDE((  cc  sq,pl)v(FALSEF.(l  cc  sq,pl)v(NOTI«  cc  sq,p()v(NOTE(f  cc  sq,pf)v 

IMF Ll(f  cc  sq,p()))))))v(3pl  x 1 (PROOFTREE(p()a(INDVAR(x)a(TERM(«)a 
(GENI((  cc  sq,pl,x,t)v(GENE((  cc  sq.pl, x,t)v 

EXI(1  cc  sq.pl, x,l))))))v(3pf I pf2.(PR00FTREE(pll )a(PR00FTREE(p!2)a(ANDI(1  cc  sq,pll,p<2)v 
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(FALSEId  ce  sq.pll  ,pf2)vlMPLE(f  cc  sq.pll  ,pl2)))))v(3p»l  pf2  xl  x2.(PR00FTREE(pll  )a 
(PR00FTREE(p<2)a(INLVAR(xI  )a(INDVAR(x2)aEXE(I  tc  sq.pl  1 ,p*2,xl  ,x2)))))v3pll  pf2  p!3. 
<PROOFTREE(pll  )a(PROOFTREE(pI2)a(PROOFTREE(pI3)aORE(I  cc  *q,p*l  ,pl 2, p!3 ))))))))) 

VE  PROOF  i cc  sq 

27  PROOFTREE(sq)A(INOVAR(x)A(TERM(x)A(GENI(i  ee  sq,$q,x,x)v(GENE(l  ec  cq,tq,x,x)v 
EXI(«  ec  sq,sq,x,x)))»  (12  3 4 5 6 7 8 9 10  19)  1 : 26 

28  3pf  x » (PROOFTREE(p«)a(INOVAR(x)a(TERM(1)a(GENI(«  cc  sq,pl,xItMGENE(f  ce  cq,pf,x,t)v 
EXIO  cc  sq,pl,x,t))))))  (1234567891019)  UNIFY  27 

29  PROOFTREEd  ec  sq)  (12  3 4 5 6 7 8 9 10  19)  1 : 28 

30  VII  ,(DEPEND(sq,ll  )=AX!0M(ll ))  (19)  aE19:«2«2 

31  DEPEND(sq,ll)=AXIOM(ll)  (19)  VE  30  II 

32  ((F'lOOFTREEd  cc  '■.qMPROOFTREEd.qjAtq^r.cdrd  cc  sq)))=>(DEPEND(l  ce  sq,l  l )*DEPEND(sq,ll  )))* 

(ORIU  cc  sq,sq)v(ANDE(l  cc  ■-.q.r.qMFAlSEEd  cc  5q,sq)v(3l  (F0RM(I)a((N0TID(I  cc  sq,sq,f)v 
(NOTEDO  ce  sq,'.q,l)vlMPLIDd  cc  r.q,r.q,l)))Af/f  1 ))v3x  t.(INDVAR(x)A(TERM(t)A 

(GENId  cc  5q,eq,x,t)v(GENE(f  cc  sq,r.q,x,l)vEXI(f  cc  sq.sq.x.t))))))))) 

VE  DEPEND  I cc  sq  , sq  , II 

33  INDVAR(x)a(TERM(x)a(GENI(I  cc  sq,-.q1x,x)v(GENF.(l  ce  sq,sq,x,x)vEXI(l  cc  sq,sq,x,x)))) 

(1  2 3 4 5 6 7 8 9 10  19)  aE  27  :»2 

34  3x  I (INOVAR(x)a(TERM(Da(GENI(I  cc  sq,sq,x,l)v(GENE(f  ce  sq,sq,x,l)vEX!((  ce  sq,sq,x,l))))) 

(1  234567891019)  UNIFY  33 

35  DEPFNDd  ec  sq.fl  H'.XIOMdl ) (12  3 4 5 6 7 8 9 10  19)  1 : 34 

36  VII  . (DEPEND!!  cc  sq, II  )=AXIOU(ll))  (12  3 4 5 6 7 8 9 10  19)  VI  35  II  «•  11 

37  l«scar(l  ce  sq)  (1  2 3 4 5 6 7 8 9 1 0 1 9)  1 : 36 

38  PROOFTREEd  cc  sq)A(l=scar(»  cc  sq)AVIl  (DEPENDd  cc  tq,ll  )=AXI0M(ll ))) 

(1  2 3 4 5 6 7 8 9 10  19)  Al  (29  (37  36)) 

39  BEWd)'(F0RM(l)A3sq  (PROOFTREE(sq)A(l=scar(sq)AVU  (DEPENO(sq,fl  )=AXIOM(ll ))))) 

VE  PROVABLE  I 

40  3sq<PROOFTREE»sq'A(f=scardq)AVIl  (DEPEND(sq,ll)=AXIOM(ll))))  (1  234567891 0)  UNIFY  38 

41  BEW(I)  (12  3 4 5 6 7 8 9 10)  9 , 39  , 40 

42  BEW(x  jan  1)=BEW(I)  (1  2 3 4 5 6 7 8 9)  =110  41 

43  BEW(I)  (43)  ASSUME 

44  FORM(l)A3sq.(PROOFTREE(sq)A(»«se«r(sq)AVII  .(DEPEND(sq,ll  )»AXIOM(ll ))))  (43)  43,43,39 

45  3sq  (PROOFTREE(sq)A(l>scar(sq)AVIl  (DEPEND(sq,ll  )=AaIOM(I1  ))))  (43)  aE  44  :*2 
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46  PR00FTREE(sq)A(f=sc*r(sq)AVfMDEPEND(sq,<l)3AX!0M(fl)))  (4$)  ASSUME 

47  Vfl  (DEPEND(sq,f  1 )=»AXI0M(fl ))  (46)  aE  46  :«2«2 

48  0EPEN0(sq,(l)3AXI0M((l)  (46)  VE  47  fl 

49  APGENI(x,sq)=((INDVAR(x)AV(  (0EPEN0(!;q)()3^R(x1f)))APR00FTREE(so))  VE  GENRUL2  x , sq 

50  AXI0M(f  1 )3('FR(x,(l  )aF0RM((1  ))  VE  THEORY  x , <1 

51  DEPENO(sq,fl  )^FR(x,fl ) (1  2 3 4 5 6 7 8 9 43  46)  9 , 43  ! 50 

52  Vfl  ,(DEPEND(sq,f  1 )3->FR(x,fl ))  (1  2 3 4 5 6 7 8 9 43  46)  VI  51  fl  •-  fl 

53  APGENI(x,sq)  (1  2 3 4 5 6 7 8 9 43  46)  9 , 43  : 52 

54  GENI((x  Ron  f)  cc  sq.sq.x.x)  (SEQUENCER  Ren  f)  cc  sq)A(INDVAR(x)A(INDVAR(x)A 
(scdr ( (x  p,en  f)  cc  Rq)=sqA(PR00FTREE(sq)A3f  1 (FORM(f  1 )a (scar ((x  gen  f)  cc  sq)* 

(x  gen  f 1 )A(scar(5q)*r,bt(x,x,fl  )a APGCNI(x.sq))))))))) 

VE  GENRUL1  (x  gen  f)  cc  sq  , r.q  , x , x 

55  (STRINGU  gen  l)ASEQUENCE(sq))=»sear((x  gen  f)  cc  sq)*(x  gen  f)(2)  VE  2 x gen  f , sq 

56  ($TRING(x  gen  f)ASEQUENCC(sq))3r.cdr((x  gen  f)  cc  sq)*sq  (3)  VE  3 x gen  f , sq 

57  (INDVAR(x)AFORM(f))=FORM(x  gen  f)  (4)  VE  4 x , f 

58  F0RM(x  gen  f)=>STRING(x  gen  f)  (5)  VE  5 x gen  f 

59  PROOFTREE(cq)3SF(?UENCE(Rq)  (8)  VE  8 sq 

60  FORM(f)A(scar((x  gen  <)  cc  sq)=(x  gen  f)A(scar(sq)*sbt(xlx,f)AAPGENI(x,sq))) 

(1  2 3 4 5 6 7 8 9 43  46)  11  , 43  : 59  , 9 

61  3fl  (F0RM(f  1 )A(scar((x  gen  f)  cc  sq )=(x  gen  <1  )A(scar(sq)*sbt(x,x,fl  )a 
APGENI(x,sq))))  (1  2 3 4 5 6 7 8 9 43  46)  UNIFY  60 

62  (F0RM(x  gen  f)ASEQUENCE(sq)):>SEQUENCE((x  gen  f)  cc  sq)  (6)  VE  6 x gen  f , sq 

63  GENI((x  gen  f)  cc  sq,sq,x,x)  (1  2 3 4 5 6 7 8 9 43  46)  9 , 1 1 , 43  : 62 

64  PROOFTREE((x  gen  f)  cc  r.q)  {(SEQUENHE((x  gen  <)  cc  sq)AF0RM((x  gen  f)  cc  sq))v 
(3pf  (PROOFTRLE (pf )a(0RI((x  gen  f)  cc  sq,pf)v(ANDE((x  gon  f)  cc  sq,pf)v 
(FALSEE ((x  gon  f)  cc  r.q,plM*JOTI((x  gen  f)  cc  sq,pf)v(NOTE((x  gen  f)  cc  sq,pl)v 
IMPU((x  gon  f)  cc  r,q,pf)))»)MJpf  xl  I (PROOFTREE(pl)A(INDVAR(xl  )a(TERM»)a 
(GENI((x  gen  f)  cc  sq,pf,xl  ,l)v(GENE((x  gen  f)  cc  rq,pf,xl  ,l)vEXI((x  gen  f) 

cc  sq,pf,x  1 ,l))))))v(3pf ! pf2.(PR00FTREE(pf I )a(PROOFTREE(p(2)a(ANDI((x  gen  f) 
cc  sq,pf  1 lpf2)v(FALSEI((x  gon  f)  cc  sq,pf I ,pf2)vlMPLE((x  gen  f)  cc  sq,pfl  ,pf2)))))v 
(3pf  1 pf 2 xl  x2  (PROOFTREE(pfl)A(PROOFTREE(pf2)A(INDVAR(xl)A(INDVAR(x2)AEXE( 

(x  gen  f)  cc  sq,pf  1 ,pf2,xl,x2)))))v3pf I pf2  p<3  (PROOFTREE(pIl  )a(PROOFTREE(p<2)a 
(PR00FTREE(pf3)A0RE((x  gen  f)  cc  sq.pf  1 ,pf2,pf3 )))))))))  Vt  PROOF  (x  gen  <)  cc  sq 

65  INOVAR(x)=TERM(x)  (7)  VE  7 x 
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66  PROOFTREE(sq)A(INDVAR(x)A(TERM(x)A(GENI((x  gen  »)  cc  sq,sq,x,xMGENE((x  gen  I) 
cc  sq,sq,x,x)vEXI((x  gen  »)  cc  sq,sq,x,x)))))  (I  2 3 4 5 6 7 8 9 43  46)  9,43  : 65 

67  3pf  xl  t (PROOFTREE(pf)A(INDVAR(xl  )A(TERM(f )a(GENI((x  gen  f)  cc  tq.pf.x  1 ,t)v 
(GENF((x  gen  f)  cc  sq,pf,xl  ,l)vEXI((x  gen  f)  cc  sq,pf,xl,l)))))) 

(1  2 3 4 5 6 7 8 9 43  46)  UNIFY  66 

68  PROOFTREEUx  gen  f)  cc  sq)  (1  2 3 4 5 6 7 8 9 43  46)  43  : 67  , 1 1 , 9 

69  ((PROOFTREE((x  gon  f)  cc  sq)A(PROOFTREE(sq)Asq=ccdr((x  gen  f)  cc  sq)))a(DEPEND( 

(x  gen  f)  cc  sq,f  I )- OEPCND{r,q,f  1 )))M0Rl<(x  gon  »)  cc  sq,sq)v(ANDE((x  gen  «)  cc 
sq,sq)v(FALSEE((x  gon  f)  cc  sq,sq)v(3f  (F0RM(f)A({N0TID((x  gen  ))  cc  sq,sq,t)v 
(NOTED((x  gen  f)  cc  r.q/.q.OvIMPLIDffx  gen  I)  cc  sq,sq,f)))Af/f  1 ))v3xl  i( 

INDVARfxl  )a(TERM(I)a(GENI((x  gon  f)  cc  sq.sq.xl  ,t)v(GEN£((x  gen  «)  cc  sq.sq.xl, 
t)vEXI((x  gen  f)  cc  nq.nq.x 1 ,1)))))))))  VE  DEPEND  (x  gon  f)  cc  sq  , sq  , fl 

70  INDVAR(x)a(TERM(v)a(GENI((x  gon  f)  cc  rqlr.q,x,x)v (GENE((x  gen  f)  cc  cq,sq,x,x)v 
EXI((x  gen  f)  cc  sq.sq.x.x))))  (1  2 3 4 5 6 7 8 9 43  46)  aE  66  :*2 

7 I 3»  (INDVAR(x)a(TERM(I)a(GENI((x  gon  <)  cc  sq,sq,x,lMGENE((x  gen  »)  cc  sq.sq.x.t) 
vEXI((x  gen  f)  cc  sq.sq.x,!)))))  {I  2 3 4 5 6 7 8 9 43  46)  70  x - t OCC 

72  3x1  t.(INDVAR(x  1 )a(TERM(I)a(GENI((x  gen  f)  cc  sq,sq,xl ,t)v(GENE((x  gen  f)  cc  sq, 
sq,x  1 ,f  )vEXl((x  gen  f)  cc  sq.sq.xl  ,1)))))  (1  23456789  43  46)  71  x»-xl  OCC 

73  DEPEND'fx  gen  »)  cc  sq.fl  )aAXI0M(fl ) (i  2 3 4 5 6 7 8 9 43  46)  1 1 , 9 , 43  : 72 

74  Vfl  (DEPENOffx  gen  «)  cc  sq,f  I )=>AXI0M(»1 ))  (l  2 3 4 5 6 7 8 9 43  46)  VI  73  «l  *-  fl 

75  (x  gen  f)=scar((x  gen  I)  cc  sq)  (1  2 3 4 5 6 7 8 9 43  46)  9 , 43  : 74 

76  PR00FTREE((x  gon  f)  cc  sq)A((x  gen  f )=scar{(x  gen  f)  cc  sq)AVfl  (DEPEND((x  gen  f) 
cc  sq,f  1 )=> AX IOM(f ! )))  (1  2 3 4 5 6 7 8 9 43  46)  Al  (68  (75  74)) 

77  BEW(x  t-en  f)-(F0RM(x  gen  f)A3sq  (PP00FTREE(sq)A((x  gen  f)«scer(sq)AVfl  (DEPEND 
(sq,f  1 )=AX,OM(f  1 )))))  VE  PROVABLE  x gen  \ 

78  3sq.(PR00FTREE(sq)A((x  gon  »)=scar(sq)AV<l  (DEPEND(sq,fl  )=>AXI0M(fl)))) 
(1234567891019  43  46)  UNIFY  7r 

79  BEW(x  gen  »)  ( 1 2 3 4 5 6 7 8 9 43)  1 1 , 9 , 43  : 78 

80  BEW(»)=BEW(x  gon  »)  (12  3 4 5 6 7 8 9)  =1  43  79 

81  BEW(x  gen  f)-BEW(f)  (12  3 4 5 6 7 8 9)  I 42  80 

82  (1NDVAR(x)aF0PM(())3(BEW(x  gen  »)  BEW(f))  (12  3 4 5 6 7 8)  =>1981 

83  Vx  «.((lNOVAR(x)AFORW(f))=(BEW(x  gen  f)  OEW(f)))  (1  2 3 4 5 6 7 8)  VI  82  x , f 

84  (INDVAR(x1)aFORM(x2  gen  f))=>(BEW(xI  gen  (x2  gon  f))sBEW(x2  gen  f)) 

(1  2 3 4 5 6 7 8)  VE  83  xl  , x2  gen  f 
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85  (INDVAR(x2)aF0RM«))3(BEW(x2  gen  f)*BEW(f))  (12  3 4 5 6 7 8)  VE  83  x2  , f 

86  (INDVAR(xl)AFORM(f))=(BEW(xl  gen  <)-BEW(l))  (12  3 4 5 6 7 8)  VE  83  xl  , f 

87  (INDVAR(x2)aF0RM(x1  gen  ())=>(BEW(x2  gen  (xl  gen  f))>BEW(xl  gen  ()) 

(12  3 4 5 6 7 8)  VE  83  x2  , xl  gen  1 

'88  (INDVAR(x1)aF0RM(())=F0RW(x1  gen  f)  (4)  VE  4 xl  ,f 

89  (INDVAR(x2)aFORM(())=>FORM(x2  gen  ()  (4)  VE  4 x2  , < 

90  (INDVAR(x1)a(INDVAR(x2)aF0RM(()))3(BEW(x1  gen  (x2  gen  ())*BEW(x2  gen  (xl  gen  f))) 
(1  2 3 4 5 6 7 8)  84  : 89 

91  Vxl  x2  ( ((INDVAR(x1)a(INDVAR(x2)aF0RW(()))3(BEW(x1  gen  (x2  gen  f))*BEW(x2  gen  ( 
xl  gen  ())))  (1  2 3 4 5 6 7 8)  VI  90  xl  , x2  , ( 
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